Extracted

• • Target

    screen.png

  • Size

    498KB

  • MD5

    47696cff587ea1fd6a75abb665667f1a

  • SHA1

    af553196fdaade821f7ee764a37b80873564a8c7

  • SHA256

    742dcd2ec038e2f6dc2e0a0e92b9ef44e3d07c9cc530e5c1bcd22469e67dc417

  • SHA512

    846c1a997ea374664ad60405ef46be5290d759c1cbe26a39d4b6a313acc3cfb8306ad07204727025154bc5fa5f2bbfe065b6ee8068bf276b1f1087f7ae8fbd4b

  • SSDEEP

    12288:DXct0iJxvUeQK1h4cNaJNF65DiqvLFrXTNLNzxMXpkaOrvC:DXcaExvxpTgN2eqvVpNFkpNY6

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1