Extracted

• • Target

    fe84e5a3c6e61f707036117078cb6da9ecfba7dd70e8e54baf57d8940ba0c717.zip

  • Size

    356KB

  • MD5

    e035de79880fd215c3819c350d437d17

  • SHA1

    310b4809c0ea96cf022e687254d29b582e909954

  • SHA256

    fe84e5a3c6e61f707036117078cb6da9ecfba7dd70e8e54baf57d8940ba0c717

  • SHA512

    873b7931b8acd4293a590a3ff3da2b7973653e4c12ec231fcf10bbb62b1466ba5c9ac7c5ae1d0c10947e92f4e6152bc798501eb5405a44af9f8d2cadc2581052

  • SSDEEP

    6144:9dO2U+hMdtR2h66yCeBbZoYdBrMAbsF6tujYqMyN2dvXYPC1:9MaMdr2h66ABbvMag6tfhVYPu

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2