Extracted

• • Target

    RobloxMultiTools.exe

  • Size

    12.5MB

  • MD5

    b733f1d2500a6c7c21601dda859a3b7a

  • SHA1

    e156f5fbf51d58e0de2ca8e88ca188f3488638b8

  • SHA256

    a32fef1ec51356b2c290f26f5fe35e957836c2934baf4724c9e6952b2cce4883

  • SHA512

    bdcec5981ad4939b8018d030121aedc889738c82b8cb75295cdf8d00297b03d971f11f085c51ef77323708d0d338d678579e87328f1ad9062b8a999891d1cb5b

  • SSDEEP

    196608:0qwiMYxS0KY8dM5n7FuaDUg8pqIGjZYgkCnWInnjKFnAtyVAEyUX7HJW5cOt:9MIMdM5n78KjXkCnWIeAXEyUrpW5bt

  Score

  10^/10

  lummadiscoverypyinstallerstealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1