Extracted

• • Target

    8f3bd6cfc591e89316c92c06066a0fe8e6ef2b70e81bde41b16a8c264a7acc2dN

  • Size

    1013KB

  • MD5

    3b303cd2c4bcb1b1e2c25386712799a0

  • SHA1

    17456a87deb6030c21d1fc57412bbee517d0896e

  • SHA256

    8f3bd6cfc591e89316c92c06066a0fe8e6ef2b70e81bde41b16a8c264a7acc2d

  • SHA512

    df80cfc4472e42b01e77885f97f7d05cf5587f7cd01857304ccf45520b24126b09eb1a4767b9cba70851e997978e2887d16663680e64fcd0cf5c4ace1064206d

  • SSDEEP

    24576:EvuBLEhmTs4RSbRFlM0HztxF57ZE53QboufuqoGSxh:XLEoR2RfM0TtxF57ZYQ3HoGSf

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2