Extracted

• • Target

    57a48b867e91d1c0bb0bedd21f2508d9357f398a0adc25dd1b5098fbee9a3674.zip

  • Size

    358KB

  • MD5

    cdab7093c60c2afddc12aaf814ed3d7a

  • SHA1

    bdafb150fe681cf205511d8546be3afceb212285

  • SHA256

    57a48b867e91d1c0bb0bedd21f2508d9357f398a0adc25dd1b5098fbee9a3674

  • SHA512

    437bfd42acdf89eb1069d2667c3bd70f28d3c835ebfd3adba3a76566ca5da71367c0d08df96bd8c9274f7c7727db1a7e8e9b46a60387a78af15e753a87c93849

  • SSDEEP

    6144:0xaP9gTq/3UXdY4TIYegMEgTR9xj20wsSQ87Ar88Hn3ggBaIAPhMwibOPk:0IPKTq/EtYmRegOw0wsnO2n6PhnRPk

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2