Extracted

• • Target

    8bee9add7c02c93656cd0115879e05b3a8cfab9752e8d32900b9cc24d319251c.zip

  • Size

    12.5MB

  • MD5

    a7f60b164aa7db111a7891f8ae04d3df

  • SHA1

    855a476b9d553b93166a6d2ac4b946e26f4713f4

  • SHA256

    8bee9add7c02c93656cd0115879e05b3a8cfab9752e8d32900b9cc24d319251c

  • SHA512

    3eef525402b73dfd075990d33d4052ed77ba5ed7acf84f8d6ad61af18d53460c829493376a998ef32173500de421201304dc51902eb656624c0f4553e9e0a459

  • SSDEEP

    196608:0qwJMYxS0KY8dM5n7FuaDUg8pqIGjZYgkCnWInnjKFnAtyVAEyUX7HJW5c9:SMIMdM5n78KjXkCnWIeAXEyUrpW5a

  Score

  10^/10

  lummadiscoverypyinstallerstealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2