Extracted

• • Target

    623897df28c316d90bb0946128ee6a4a9fe9776307787f1de12c3b078b338778.zip

  • Size

    1.9MB

  • MD5

    ef949464dd8dc945ca3d997d2a1f5d49

  • SHA1

    c68400fb4f02c0cd9ee27760931fefe7a1d3764e

  • SHA256

    623897df28c316d90bb0946128ee6a4a9fe9776307787f1de12c3b078b338778

  • SHA512

    781e0765988976ebea95e479032b2d072d1aec59f692f1ed0d04c773af567d69e4e53e110153c0e9f8fe566747bcb090ba38a3656eddaca25a0c310a3456da11

  • SSDEEP

    49152:+pz3IaXn7fXnAXD0TVbTGkJWCI16GwE9NPPV:+pTXn7PAYx7QCwwEHV

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2