Extracted

Extracted

• • Target

    procexp.exe

  • Size

    3.0MB

  • MD5

    a061737186c5156cedfe297d10396e16

  • SHA1

    93c81ddc275328f5de1893a6c1e88f2200cfc0f7

  • SHA256

    52b0e7b32320d6af437ffabb88b0aa275bff866cf812149b5fa835470be9a296

  • SHA512

    71eb46e4b61a2267ba920f3940a18c7ed7de13eeb33fd15f471c09f4c76d3d5d42cf5b87053b587b6ce214f4a250c08b0301c059b3b19db79d9a12237e5f38a4

  • SSDEEP

    98304:rdWF85SrRjqqZnLTYKn+BhtobRn703Mbf+W7:rdWG5NqZnnYKn+fwnyMbf+W7

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2