Extracted

• • Target

    0ab0191482a855baaeeecc902a04d4cb2cc3b8870ea007561f48ae6f52aff586.exe

  • Size

    2.5MB

  • MD5

    81a1b8b08c292f1e0496f892184ef809

  • SHA1

    98edca2517b80002adc9b12b0e863b44263831e6

  • SHA256

    0ab0191482a855baaeeecc902a04d4cb2cc3b8870ea007561f48ae6f52aff586

  • SHA512

    b2cc36a766c067a1554a1bced0666ad44e315971cc563508f0c19c30174b99a406e2faafd255b09f2bbcbc03e0b37631fa56ea291c6ea887daeb2026cdddb1ad

  • SSDEEP

    49152:sDuIFsqiqZub4i7gm6y5m5VXNxrh40+FFlycbRy8k:sDuIFjZU4y4yyVPrh4/RbRy8k

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Suspicious use of SetThreadContext

  behavioral1behavioral2