Extracted

• • Target

    a6c5ffbc346b16953257bd5c79fded2ee46ab50d70a97b6d0de017ba588a0ff3

  • Size

    3.1MB

  • MD5

    0ceef0c0f61712328156c2dea27d4fcf

  • SHA1

    76a1209e255ac2a97c0d33742ad2bf9b2178b878

  • SHA256

    a6c5ffbc346b16953257bd5c79fded2ee46ab50d70a97b6d0de017ba588a0ff3

  • SHA512

    466a2127f3cd317f4c6e9f9f1f2b869c791fdd8c26e80110ff63bc04aa718562e5de83f502f36171519158b1e2c665a76668be2e756e24fdea5c77e9de273a0f

  • SSDEEP

    49152:AFFkWc8z+lsYf0u5oAcXRarpHCZfmZAwK8GqLaW:AFuWZzHYfz5o1XRarpHCZf4RK8xLaW

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Suspicious use of SetThreadContext

  behavioral1behavioral2