Extracted

• • Target

    4dbf3891ef5bb0e734b67630fe2b5210035d56307ad663f3867d9ebcdd00497a.exe

  • Size

    70.0MB

  • MD5

    8139ecd1163d5fcc41821dbb61ddc2ff

  • SHA1

    707f18cc33e9ba8f7ada11b202b44876d375cecf

  • SHA256

    4dbf3891ef5bb0e734b67630fe2b5210035d56307ad663f3867d9ebcdd00497a

  • SHA512

    fdadbf19f27dc1c53b06834b1e5e196044cef456fe00a192d33c7fe3fab9ad990768133d006e41e43c2c727e7a2991f1fc5e279d315740a81240c66871ba44ec

  • SSDEEP

    24576:TetiuQ3DguTjn4J5h5CGo9K2Y9iQ0pUIfH5Bk4+aKb7jb7j:qAB3Mcn4JrAVVQ0pVk4+7

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2