Extracted

Extracted

• • Target

    Avira Advertising/payment and key.exe

  • Size

    4.2MB

  • MD5

    ad433332d168ed1555d260e6b149e2fe

  • SHA1

    beb4d3f2d7a8d2b4b194e7c123477010ea1a6baa

  • SHA256

    7232ec3f17f009b1d24f7383d32a4b499288b000d5738758da0035252953e409

  • SHA512

    bc4bd97db41debe9615d33a31b852f44c89b6ac43104241427f7ed742e771cc2ce590c583859e5368f2fd1e4c1b4ae57827a90ba1c095c76f0f2bc04857d8d92

  • SSDEEP

    24576:h5yHx5/mc9iNTGYARvoqY6nNdcDMdvnLD4WlYrRkcXV7G4OVnw0cLOV:hIxcS8AY6nILfr

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2