Extracted

• • Target

    Cleartones Everything/cleartones everything.exe

  • Size

    784.2MB

  • MD5

    ea965f92edd7cdae2127c38a9272a510

  • SHA1

    d692194f3184d7c97de12b60624f397afa306634

  • SHA256

    038bd5f9da2ee5b0684c3f0d660de014d06431a1ddfff16394b33396560ce1cc

  • SHA512

    0c14a38c62af7ef9250731d0d725e1e1784de6af42490c70c230f9781b69735f5b9e3c90193e6e67c022fa8b74e683f9d9f3eab6c46f2976e2daf032583a8249

  • SSDEEP

    393216:HWRpCKzYnlGGJjBeYH8n0oVJZsmW2pYUOt5ri+dM:HWRUPFJrM

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2