Extracted

• • Target

    17e8ebdf1c3303f6c9538e9998e533962aa732a1356434d6cf78ab353f3a9f06.exe

  • Size

    1.1MB

  • MD5

    25b4bac0866214df0bcb32a8dc280555

  • SHA1

    58513411b725c0f264013acacaba7fe069208aa7

  • SHA256

    17e8ebdf1c3303f6c9538e9998e533962aa732a1356434d6cf78ab353f3a9f06

  • SHA512

    4f63a60288d8e15eb01843d1ecc61344606a4e3bf0933cf8bd02892dbb7d2167b7b35d4ff17c5207b25057520d7147bfa4bed38d75b6429f0c9ebe6458de592d

  • SSDEEP

    24576:setHGMwy9WuUSPl/hw6z89q1zfaaJ+1DPVhPQLc3nVQMd:j7zMU+0pJQ9hPQcQu

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2