Extracted

Extracted

• • Target

    initial_d.bat

  • Size

    838B

  • MD5

    b8c74b6c596351ca5bd46c0bb6e98dfd

  • SHA1

    6cb4b41a78059c30be91f2464bf790244a1c99d7

  • SHA256

    babe2715fa636ffaf699ed8176d8ca007b94defdc2ed41fb138803c8847094f4

  • SHA512

    22b256cb20232d00c9e2085a6d54404f3a2a2167931a637e4880054ac75605d15c38f004a69038e70366bd145c755aafef2047b79c7ab72e61566364a1df9610

  Score

  10^/10

  discoveryexecutionlummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2