Extracted

• • Target

    DodSussex.exe

  • Size

    1.6MB

  • MD5

    7d1b12a3e617535c0fe754dabd278393

  • SHA1

    a491a8dfebe21a4e6ffad330bb5a6bdc24cff56a

  • SHA256

    7aa257295dc88b4b65d80fa9541bc6b029cf67c47aed445ca4d7ebe7b806e793

  • SHA512

    6dfd70238014b73a92818fcc637d829a99e05edd7e77a0df9d81f363de1be3cb352da5d340259dff9914cb3dcc601e9de2b9e6cfcff59a6711ddd0c3303e6011

  • SSDEEP

    24576:Eu/J5gf4UvzU8YxX6/hCx3MVpBR60dRpu/A8vRYgxOrDrDvrQy/l5LtElfuatcqX:t/+4U7yS60fQyrEWl5hElfuEoMfJ

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2