Extracted

• • Target
    data.zip
  • Size 8.0MB
  • SHA256 c3ad620d7f5c73d3688735b00f42078e60dd2e300d263d409937fcf29117b5f7
  • MD5 5cddde0176f0b7c7a4a7b62028282cf5
  • SHA1 a8c8c755ce631f4e772ed60a3e6cc0a9a4afda96
  • SHA512 be5c77954f349661c1d3d96b5b5e234e55b557404b0812b92d5d440df717d76a44fea359d61137cd3db203df8bc420ae6b7a8dd5931e995b1d89ed4c092adc52
  • SSDEEP 196608:+GznghcrTM+MKvfkQxCnhH0e9n2n+D4iybV7Bw1x:+enZ3MIfkQxO0Q2ny4vji
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  lummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2
• • Target
    EASteamProxy.exe
  • Size 5.4MB
  • SHA256 4e775b5fafb4e6d89a4694f8694d2b8b540534bd4a52ff42f70095f1c929160e
  • MD5 ad2735f096925010a53450cb4178c89e
  • SHA1 c6d65163c6315a642664f4eaec0fae9528549bfe
  • SHA512 1868b22a7c5cba89545b06f010c09c5418b3d86039099d681eee9567c47208fdba3b89c6251cf03c964c58c805280d45ba9c3533125f6bd3e0bc067477e03ab9
  • SSDEEP 98304:o/zx+riUDpJowboU+XEsumY2XW6jBYeZ1ER:2x+riUDwUj12X1tY5
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  lummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral3behavioral4