Extracted

Extracted

• • Target

    randomscript.ps1

  • Size

    1KB

  • MD5

    322d6110a033d0aadfc40c14b8668fc7

  • SHA1

    810a4c158b6016c990ac9653e89a6e9af79d578c

  • SHA256

    22b607cba20413cd4363dd69d04d7ecda694ce3cf514f965a74c3605c7793248

  • SHA512

    8e7c57e67c61ef9480f29232015a375718ae4defcf2603069da297dac0e4c4792f2f95371fda521c7fae8e077d38bdb34c5169d9fddc45064b37488a1d5e0699

  Score

  10^/10

  executionlummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2