Extracted

Extracted

• • Target

    InjectorSOFTWARE.zip

  • Size

    18.4MB

  • MD5

    4087fb773df09b91e226c59bd9e400ca

  • SHA1

    40680eee9d47ffa93b7c10cf4b9cd71038ff81c5

  • SHA256

    35760704fdaef694cf129c2cf70d6edbe87adca57ce2073eeba6b39e97f4c5fe

  • SHA512

    e67eaf7cfa49f0ff487f9762ecfea1930394e68232cbe9dc9c0924d3d8ecdbc522e6c210270f90ca19b0aff36b5449b8b5d63ffd416d95b48ebed91be8d5357a

  • SSDEEP

    393216:r9qRuxNxl69OXuniRll7a08I7/3asKn1RtrbSZJZwP0M:ZtNxKOOixoxsSbSVwP0M

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops desktop.ini file(s)

  • Enumerates processes with tasklist

    discovery

  • Suspicious use of SetThreadContext

  behavioral1