Extracted

• • Target

    54cd3c552016accfb319f82ab4185499787b7af1985f9c958e17ca6f49866960N.exe

  • Size

    2.5MB

  • MD5

    bb455c221c61a4df954daf8155b9acd0

  • SHA1

    3873567233815e7eb0b14fe009fd638d386bb304

  • SHA256

    54cd3c552016accfb319f82ab4185499787b7af1985f9c958e17ca6f49866960

  • SHA512

    85672dd6975295dfebaed9635a5bc05ee9cefe401d9da646fc7c2ead0f782735863e8b7254df7bd3b0019dc81cc1754ab00fc6e6b3af6d3cad8a8b61cb07f5f7

  • SSDEEP

    49152:sDuIFsqiqZub4i7gm6y5m5VXNxrh40+FFlycbRy8k:sDuIFjZU4y4yyVPrh4/RbRy8k

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Suspicious use of SetThreadContext

  behavioral1behavioral2