Extracted

• • Target

    3f2e281bc1e4ff8f98cf343e13eb71fc5cf6ed7fe5241980ac00d90439f13c84

  • Size

    6.4MB

  • MD5

    57a6a83482ce2897e8cdec17accbd662

  • SHA1

    4416d6ec1f6a25245a4fc5e0352f3deb11e0b789

  • SHA256

    3f2e281bc1e4ff8f98cf343e13eb71fc5cf6ed7fe5241980ac00d90439f13c84

  • SHA512

    4960d3ec893153bd5138e64dfa8dd1f205dccb4104c839024b87b2e18b256532830280826ce61b6063929fa8b72abcc5fa95c582596abf6874d6ccbea1b509ab

  • SSDEEP

    196608:6qwfqwOzG9HNMiKXSuXOBGdg7L+0gO18pio:hEtsiuXOL1dJo

  Score

  10^/10

  vmprotectlummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Executes dropped EXE

  • Loads dropped DLL

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  behavioral1behavioral2