Extracted

• • Target

    eaa5582959770d5fa7fc18fa15d6e6aedec88b7503b8d16df3dd82626fab57d9.exe

  • Size

    10.7MB

  • MD5

    b2ceff540f1fb7234b424a5702e989ba

  • SHA1

    db23b99773aaf3c3ccf45bb93a7321647aad99f9

  • SHA256

    eaa5582959770d5fa7fc18fa15d6e6aedec88b7503b8d16df3dd82626fab57d9

  • SHA512

    d42c2dbc0aecb9220c634cb3fbbe7c67eea107599048d7e3c66c01c0ed6a3c5639b6448fcc4de30e1a38a1b19bdd9882513403e3abfbffbfbdaadae49b59b342

  • SSDEEP

    196608:h9oqgEzg9QvuVBkqFGKAJ9RmX2870VikXVCnZXTDqQ7poZ:h9VgECiuVi4JARx8gVJsZXTOQ7W

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2