Extracted

• • Target

    5553e4e355ee0dade1223c455c8232a49a1b53d7f55bfcd27f6aeaff166f67bf.exe

  • Size

    10.0MB

  • MD5

    3f743b632a0a52e5d8ba262c13134b17

  • SHA1

    3a0938ca3cccf15af99258c070620e5809a8eaa8

  • SHA256

    5553e4e355ee0dade1223c455c8232a49a1b53d7f55bfcd27f6aeaff166f67bf

  • SHA512

    60813c38db484fa365da3fe37f86a49d3e671e7f9fedcd8082696cf7160a171b5ecb5fd7ee0a76577ae585f3481a1866607a919a2a3efd80553bab9356e17326

  • SSDEEP

    24576:q2T2ETkozkFJ22KXLyGPMK2p/2lYRfKDgJ4tfG2i5:b2ETuFJVCLJGpOlYRiUJ4U2i5

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2