Extracted

• • Target

    installer_1.05_38.2.exe

  • Size

    1.1MB

  • MD5

    a4e4e88439a686133410ee5d2636cca0

  • SHA1

    0da848a0b8f76535b25f877c867dd46234d3cfc4

  • SHA256

    e100226a14f7c255450865b3785f5caab2496f30ad0d141498a986797a388188

  • SHA512

    4494b1e077e779c8ab683eb1f1ebd8d41b1156548d28bac99a8f7a0ecd0af3b6c646218b39491653950c569f1b2673cb5dcd7ef064e99f13a633e88403790072

  • SSDEEP

    24576:tWuoH84YJPV6M9YZemw9v3hgGC5gAH/HY+sexyUoYzhRhOoyHE3w3:EQ4eV9YZet/hg1OAH/HJsHSzhRghHE38

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2