Extracted

• • Target

    forra.exe

  • Size

    10.1MB

  • MD5

    03167859ac3e46723ffef8ad110426f1

  • SHA1

    8c7eafa3d5f3f4ff7a5e5968db427ccaa00d8648

  • SHA256

    d723f7bb031b36dbd5ab0f3d9bb7b995569dea439edfbe66a9f8999c1a0ce562

  • SHA512

    2f1f2ff80df3803e0b996e249c376008db33fbd786df94e1457d46f6f239c8cc4cdd64bb3a99e189529579434445af4faae607fe005e88e259e368b4970b2162

  • SSDEEP

    196608:kkxt6bIEyFiIbZg4T4hac7p6eDcGRYtqfigfD+iA90W8/LagDj4/U/nj6Fnjj:3oIEyhbehacQeH1fzfD+CW8VY/Ub6nj

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2