Extracted

• • Target

    8f9c072ea3c1246b4602b9f407c35191cc4007fad3076005d0194e89025ca365.exe

  • Size

    70.0MB

  • MD5

    380cef4cfa43fa74716059e3296850ec

  • SHA1

    219e5f27a6b3f5b97add28a5f663ead6d524f4b0

  • SHA256

    8f9c072ea3c1246b4602b9f407c35191cc4007fad3076005d0194e89025ca365

  • SHA512

    38acb01a019cce3af96a51aa9cfb5609c34c4a35752b985cd6ade460e6820e75a9c81e064b018a1ca9953da789ef53350c6500fb2a6b2c9e6b546f64162555e4

  • SSDEEP

    24576:JW6QE/BE0RQZUhI5Arcsb+9/hAqx7ViycT9azR0Hh8UC9JqA+UqxPRgyb7Vb7j:80KOQ+XgsbEAG710HYJEa+

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2