Extracted

Extracted

• • Target

    download_offline_rar.exe

  • Size

    923.2MB

  • MD5

    bd30e5e7fc8e57f276b6eccceee86dd5

  • SHA1

    5237df5a4f8e5192c7f09ca9136ab222e8dd0a91

  • SHA256

    48bcebf2bffcdff630d356a510c5464727f19e57382b0a9f31c9f8495aa2c7f7

  • SHA512

    f8db25e7d81ca3f264326f5863bd76d5c4c5f1a037020a17630ff18eab2d969725db7e66f10d43dbe6a4f9669de37ce762796f702b7408e52bd76a7fabeac09b

  • SSDEEP

    393216:qtCShZKJAIfTDu86cBPplurCQeI2EkzDnabtCB4LlV9acZ0D5A0tPTD:OECILXmOSzGd

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2