Extracted

• • Target

    21fdefb7a869bf7db4341cf0f7527e1a87f37191c5ca79b169f05ca657596e34.zip

  • Size

    1.2MB

  • MD5

    9db397278c2331187c132609b6a51ec0

  • SHA1

    307ff00180e5403f89744ca715371c2ae51737ed

  • SHA256

    21fdefb7a869bf7db4341cf0f7527e1a87f37191c5ca79b169f05ca657596e34

  • SHA512

    5b3b54fe9d23b6f55c8098ccb75ad3cca24220e632ffae00f6e4d5132124a0d90db7a36a4d13c4432742c74365a6a88615639fdef51078a4518a64eaa59060d5

  • SSDEEP

    24576:tPEIhpOkc9R77MSc5Ao4oFDsBGSGXbGXPiRx2zaUsVCbw2hDE1XFstL:tpSjz7ISAFIBbGrQ6UaUgd2hgEtL

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Suspicious use of SetThreadContext

  behavioral1behavioral2