Extracted

• • Target

    6969.exe

  • Size

    53.3MB

  • MD5

    78dc0759a77be20264122225bdb8d59e

  • SHA1

    a38a428199ade9f82ee993f301e4812890c829ac

  • SHA256

    4e0cec1e4b37b441348aafedecbf222b44e57e6dcfb26288eb4abdb99dace7a2

  • SHA512

    1b95d0893a608d8976d587651ddbb98f4dc52926f95c7ab7e38fbe9b8fc510e4856b5b1cf2199a71cdff50b22e82a510f6ba20592630a67393dfc6cd0db2a877

  • SSDEEP

    393216:S76L6otUitqtH7wHtXq2pt2jbOCacCFIK0fpP9HF4VW8yfvnVQx4urYsANulL7Ns:S0LoCOn+2vs4urYDNulLBiuo

  Score

  10^/10

  lummadiscoverypersistencestealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2