Extracted

Extracted

Extracted

• • Target

    3a5dabb21c49e392212bdfd7da73b5ec0137354106a1026e6b614536b850b548

  • Size

    130KB

  • MD5

    12a10c86cb81ccbd19168a281757f944

  • SHA1

    80c14639a7bc5cb4c58922e5ded907f3c9f2a962

  • SHA256

    3a5dabb21c49e392212bdfd7da73b5ec0137354106a1026e6b614536b850b548

  • SHA512

    e2efcfa830bdf1b63524b93a9b5b6e9b8f39780c1946960ba6cfe2f1b25693b3bfac9191e3b2054e343d691c4f9e1cb68542f64e653e3dd685a7d46825b76524

  • SSDEEP

    3072:Hf1BDZ0kVB67Duw9AMcAbmFAjrYEOnEjbWicBGIgPjzgw0XIu0I/2jAD:H9X0G6/jrkJiUgPH/ubXD

  Score

  10^/10

  lummadiscoverypersistencestealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/InetLoad.dll

  • Size

    18KB

  • MD5

    994669c5737b25c26642c94180e92fa2

  • SHA1

    d8a1836914a446b0e06881ce1be8631554adafde

  • SHA256

    bf01a1f272e0daf82df3407690b646e0ff6b2c562e36e47cf177eda71ccb6f6c

  • SHA512

    d0ab7ca7f890ef9e59015c33e6b400a0a4d1ce0d24599537e09e845f4b953e3ecd44bf3e3cbe584f57c2948743e689ed67d2d40e6caf923bd630886e89c38563

  • SSDEEP

    384:nUOPTbiJmdztwwKq8W1cyMjPzV0Ac9k+LMkIX1+Gn+XHdjf:nTikliwKq8W1rMjPzz+f

  Score

  3^/10

  discovery
  behavioral3behavioral4

• • Target

    $PLUGINSDIR/ZipDLL.dll

  • Size

    163KB

  • MD5

    2dc35ddcabcb2b24919b9afae4ec3091

  • SHA1

    9eeed33c3abc656353a7ebd1c66af38cccadd939

  • SHA256

    6bbeb39747f1526752980d4dbec2fe2c7347f3cc983a79c92561b92fe472e7a1

  • SHA512

    0ccac336924f684da1f73db2dd230a0c932c5b4115ae1fa0e708b9db5e39d2a07dc54dac8d95881a42069cbb2c2886e880cdad715deda83c0de38757a0f6a901

  • SSDEEP

    3072:8CkSJJ30k1pn2T4ISnUGN+E8KnCOxA17jxLmRtWHyPDQFllOdJiSg:tkSJy+c30UxbKnA1hLKWSVdk

  Score

  3^/10

  discovery
  behavioral5behavioral6