Extracted

• • Target

    413c17f73a0831d6ae209e491856a66e07e8c0af70e7e06f68a7b7570ccb3a95.msi

  • Size

    16.1MB

  • MD5

    18577f68754f3e2703cdca2df9ba65ff

  • SHA1

    8d8846470510b1b6f81c0725975c7c3589568bb3

  • SHA256

    413c17f73a0831d6ae209e491856a66e07e8c0af70e7e06f68a7b7570ccb3a95

  • SHA512

    eb238a258b0dfe40716c2a8bc847951abbac4e7224ecefcb13be559a63cc39e6645e406764991cb60b87aa082196b890ff78c3c25c659b851eb02c4064e8eaec

  • SSDEEP

    393216:LPF3zv8Zrqb+CUuubX26jytnTPjnXcBv9k2VvOTp:JzwqNUHytvnMd9Z

  Score

  10^/10

  lummadiscoverypersistenceprivilege_escalationstealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2