Extracted

• • Target

    2bc1ef0c42eb983ae1ef7f78f090e975b286baa80c1dca4af47fe17f4b03e7d4.zip

  • Size

    356KB

  • MD5

    b924184a8cb30dc7fe2cd123ad01f9f6

  • SHA1

    cd17290b83fa1929c10d22d10ea4dbbeb04598df

  • SHA256

    2bc1ef0c42eb983ae1ef7f78f090e975b286baa80c1dca4af47fe17f4b03e7d4

  • SHA512

    93aa6410cb432e77a05d0f40e016c94376bd0f2c0c83a8cf38b2720529b9858644bb581c28eb07e4d17b851ab6aad090e6e8dbef6cfdc5b77874343baef9c377

  • SSDEEP

    6144:VvkxvJ/ERkS80GQ22speQuMyRNDXtetrJBq5Y5f19Blms5HU7I3JJ4vnv:ZkxxMuS8Z2sppu/RudJBN5dpp07I3H43

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2