Extracted

Extracted

• • Target

    b630b19ccd0acb4fda6404610f1cd7df0c71849f2c9dca42ce5df9779f96db47.exe

  • Size

    1.1MB

  • MD5

    736d94d331cf5d6a2cc45f4743132008

  • SHA1

    0b55e71db47a40ef5b4f9f2068dd26fa64b898b2

  • SHA256

    b630b19ccd0acb4fda6404610f1cd7df0c71849f2c9dca42ce5df9779f96db47

  • SHA512

    ecbcc0159cbf45a094cf887293a7b77a3f8d79dda61a7a59fd164a5bc4f8398c1fd6f2cf429fd0d25644df0b211768fb417bba790a113eb23d5e295dbb5018bb

  • SSDEEP

    24576:mdnMao5l87bHiMAD+YW47CU/q+cbrrE6TaxX3mJVGlZkmrK:6Iivgr7C/bv2d3mzGHkmrK

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2