Extracted

• • Target

    violenceknowledgepro/violenceknowledgepro.exe

  • Size

    889KB

  • MD5

    d1eadfd356ca8d1415bce200777e72b9

  • SHA1

    ac5d0d370ee26971cd5f7b62b77c5fc79aa2f801

  • SHA256

    23a9650b7bee8c9e5b61d1662b611caa998cbce0cb9e6addaede9d4534e8e7a9

  • SHA512

    8d918091ff2a15149e2e44f88767da0200d28e39a332e35c87cb72f27afc0cce16a2b5d01a60288e3d74d1fee1053da05de137cbe24a3631bc24b2292e180591

  • SSDEEP

    24576:mfyJ6xNhYZvBSr65Jikifvbjd2rWeg04GfXgtp:TExNhCBSr6Nk0hg04aXg

  Score

  10^/10

  lummadiscoverypersistencestealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1