Extracted

Extracted

• • Target

    Solara.exe

  • Size

    7.3MB

  • MD5

    a46c3372dbfc0e3f4a97db227e07b131

  • SHA1

    247d84b02e289747b965af37b1d331f47633b1ca

  • SHA256

    767b5beda00bc75c954a9be8726b2f76a300e49f428eb64cbc362366bd2528a2

  • SHA512

    17b1068602a2ddffa93fcfd174fc63400853fc5b83305c55c0075f02463214cf82e12bfb6424bee897c0bd6a20561fb1ca95b190cf4fd1f7c6761e06d8b573cb

  • SSDEEP

    98304:zwREXBlkqxKUUhU5/UV2QU61X/8LyyTUspbP34igWLqmfoRp:JXBlkqgUIgQU6ReDoi7eRp

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2