Extracted

• • Target

    cfc0afa4867a4019afc67b9ca66280c3a718d971130f59bc373db237ef0b91fd.zip

  • Size

    366KB

  • MD5

    d4e10a306f4b1f36d2c4c2553a92a30f

  • SHA1

    0cab98186646554d970a1f81bbbd3d4f039ca999

  • SHA256

    cfc0afa4867a4019afc67b9ca66280c3a718d971130f59bc373db237ef0b91fd

  • SHA512

    549c6bd54dd772728a09e6debb17f387c4ac813b60f88387570d9f5d7bc31d481c564a7f515c9dd18580cefd6cc17122d256c4d4322ba96253b9abf3cc9e13cb

  • SSDEEP

    6144:6dO2U+hMdtR2h66yCeBbZoYdBrMAbsF6tujYqMyN2dkXYPC+EO:6MaMdr2h66ABbvMag6tfhWYPzEO

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2