Extracted

• • Target

    bda506a1ae73f5514cbf100a95f54aeb2877368702fad312fabf0f2641b34f91.exe

  • Size

    70.0MB

  • MD5

    ede2e7d64a73a46b252525a4136b47bf

  • SHA1

    5025d1d817d6d9f24f1d5197759fafe7cde6f0da

  • SHA256

    bda506a1ae73f5514cbf100a95f54aeb2877368702fad312fabf0f2641b34f91

  • SHA512

    86b65b2da27a30233b49e940f2b609cff3805bcf00aa75222e07f783e1e8fb4bcc5b5e4c6fc4e6e264419ccefd92f093acc0e850ace8a9ee34ff81ae59458460

  • SSDEEP

    24576:lhYvug7sUOQNncXfPm+9zxBRj0oLvcXwH4OPFvpGIr7CJd:fLg7s0Kzx/j7zcXwJPFx17q

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2