Extracted

Extracted

• • Target

    Lunacy.exe

  • Size

    65.5MB

  • MD5

    a8604ed6963fbd500f7ddbdc2974087f

  • SHA1

    711ee4517ba5057b3f2b77f353bc5baf8907d3ee

  • SHA256

    fad34259cb3d3755be673a6d68b260410886c8a331d521cce755f5c2b901c266

  • SHA512

    33fe9b16210bdc68d4bc98a66886f9792d089ec71c21a707ae53a62bf558e910022f11d82d5bb72801b67bb3d90179e433bd2734942b5458835f71b4e4deeea3

  • SSDEEP

    1572864:mDrVnCeLskhmYGTltzFsz33Us7MCnp70KGnfHlD86dqyVr:0rAeLnpGTlKd7MCnp70BfHq6dNVr

  Score

  10^/10

  discordratlummadiscoverypersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2