Extracted

Extracted

• • Target

    load.exe

  • Size

    1.3MB

  • MD5

    9a89117c9bab14aea11212ce3d976807

  • SHA1

    e05a5d085eac626d3410759d91c57fd72aebfe58

  • SHA256

    39903dbfdf7ba346cc51e10fc4c3e6b4c06a2c7e993daf55fd175ac81a321d3e

  • SHA512

    55a422401592f2a681cdd2d880a08eedb79422ef3ec6871f3a5e0b1cc230f254ee9fb7525a155103f6f7b691aa62be4f69b987d8efe0d4faa3eff1c91a1d71c6

  • SSDEEP

    24576:+cWEAED8iMPtLVSLRw4ngZDEtvFAK4xwheL57FpbQLYffegKWz2NbGN7Tig:r8Jt4LRfIEtvFJhheL55pbQkffegCNC

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2