Extracted

• • Target

    94db001549a042c617690c3998d4d2685dc19b6c3663d46285fcf3e36c4c3920.zip

  • Size

    361KB

  • MD5

    9b9633c008202c8f565b5502d6bdc4f8

  • SHA1

    dfcf5144471dd2a5fc02859b32b7c264990ad210

  • SHA256

    94db001549a042c617690c3998d4d2685dc19b6c3663d46285fcf3e36c4c3920

  • SHA512

    7ef998492490142b41b165cb139817775f4928adb9ccde64cb313cc04ac18cb4d1f789ca16e8543d14f8648bacad78755ad0bab5c592c2e62e75174131c1ca53

  • SSDEEP

    6144:QYT9J0Hfev0iPtGdYClOsPTnKBwNIm7yCegxhuDNzrrbOq5HcKqQwbIkGFuO:5AmvfPtGdflnTSRJ8iDd/opPdY

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2