Extracted

• • Target

    06384a97225d303a36c0fe0bc6f49e6d03dce0bc5f437ae8ac8a4a432ff68b61.exe

  • Size

    850KB

  • MD5

    0df5f44040c57cb4f63f442ae2c8d904

  • SHA1

    bffeae3a0bbb2a4cc801072cf6c7d8a1a0757e43

  • SHA256

    06384a97225d303a36c0fe0bc6f49e6d03dce0bc5f437ae8ac8a4a432ff68b61

  • SHA512

    e5b2e3e26020d11a7cd74f2de101f5a4e9dfa1169e83d359d247785146db993a8cee74729ffdfffa32771f8bb7177addf216ad298b817fbc4b401c31114964ab

  • SSDEEP

    12288:E3LFTQjt6PAr6IsE75dLS2HPWxrLHBDMhCLF7nbJ:38Ar6IsY5dZgjBghCBrb

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Suspicious use of SetThreadContext

  behavioral1behavioral2