Extracted

• • Target

    RomanticCopyright.exe

  • Size

    10.0MB

  • MD5

    a737e94c53a284ae8c712eb7b2a2d209

  • SHA1

    a5d4113415f38413b5bcc2698e4aaf573cf8217c

  • SHA256

    677b2f7ea578826adb9c0f359c6436c364f712803080b38d81ecc1f25e5b97f5

  • SHA512

    ab87ef25549d4860269015d279aaf90a35bfd4c26457271a84cacf64c0a0c97d0e4c435136fb9defd2c64307d1bc1e9596ee278c868e101f6a2c657f87bd80b6

  • SSDEEP

    24576:AoN7JofAGrqyy7IyDCaNg9L+HlH8Zlna1bQ1SD:nBJ+AEty7IyOD9L+FUnv1I

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2