Extracted

• • Target

    02a0853cbed6c7c556e4f9a62195568f2594cc3a5ef365214bc9289632b1cd51.exe

  • Size

    1.1MB

  • MD5

    5cca6a6746a3f3efc901b3eaa503f2e6

  • SHA1

    413e1738bad7dfb582bf325e99b77de497134d78

  • SHA256

    02a0853cbed6c7c556e4f9a62195568f2594cc3a5ef365214bc9289632b1cd51

  • SHA512

    c29c0346167fbb8bc641c717dfbab38e0ed4263d085dfd83b50c557df2b7b3dd00a94097fb949046216c27df3732a126ee11b886c64c165afcbe327b1fc510d0

  • SSDEEP

    24576:tWHjlwZHgyeGKkTKZpbY+h7OhLC17zSIMFRBkPmrpyVY5N:clwRcQ05pt17zSIsE8pyVY5N

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2