Extracted

• • Target

    lumma_phothockey.exe

  • Size

    205KB

  • MD5

    78bd1dff11c56a3138f78ff061c34d5a

  • SHA1

    9ba8bbac951b07a3fd64729631fe387e0473f10e

  • SHA256

    18f3749e057ca1d3899cb27c94dac6394e3716ab46be15e98594865e74b779bd

  • SHA512

    d992d46ef28acc8b36c306ce7610fc64142e2ebaac1ce84bdbb1d6dec63868f69e5e0c8929fe2f04b201999e3d4765545b5277566f0a678b86a67be0e29c52d3

  • SSDEEP

    3072:EIfZSq/gPyaii68Ffi7mgN+bI8J1HUYXYxA2vIDaeHrtsC2hdRib1:EmN8umL88J10YXYxA2grrtF2Zi

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Suspicious use of SetThreadContext

  behavioral1behavioral2