Extracted

• • Target

    0d35f7d7e3757567009b96229b552db60f6043130a537a03dca7e2b8adc9aa24.exe

  • Size

    212KB

  • MD5

    58fb18fedb04649ef277228cf9802381

  • SHA1

    e93a8abddfebd399499cca7b4fb01a15cb8b519a

  • SHA256

    0d35f7d7e3757567009b96229b552db60f6043130a537a03dca7e2b8adc9aa24

  • SHA512

    9935140ca4d80ffba106dd1d86e46ef542797b34fe1ff14df51cb87e1a5400683e1bcb34eadae5791408e93274cffbf94828498dce4c05b9d9eff797f24592f6

  • SSDEEP

    3072:+3xT+i3smFQDPwCR3C9mZcRA86aV5VAFikVNTsh2QTTwC5iI:+3vQWHP6a7yNy2QTcC5

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Suspicious use of SetThreadContext

  behavioral1behavioral2