Extracted

• • Target

    file.exe

  • Size

    10.7MB

  • MD5

    c86bfa59db258e777196709f7ca36774

  • SHA1

    cc2d5f8ff4d5405c12b87e01ae13d79f898282f4

  • SHA256

    5659f401e9c479d51bf256092e8d7b0c00abc6286e7f3b2d7f527995a145593d

  • SHA512

    65f4d5c986364dbbb535d0179b1d2a1a595b12aa6cf332b1b3cb2283c8c90756f9250f19e5a1025f5099aa9cbeb60596449d17539fa9f77a4392c49de6256b1d

  • SSDEEP

    196608:lct7PPvR14i+krW7XWgKWTDv7El9Co1ex/PPDDXXgCU2SITN8EzopVF3KdJqyx6j:lctd1FaWgK6D59xPXgCFSITiEz9dfwgQ

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2