Extracted

• • Target

    0033ecc4f43d9e0221800134b1b9d756f212a0c617ebf408f05d85d1f64ef920.exe

  • Size

    1.2MB

  • MD5

    40ad84dcb616e5787eac1c7294265ca2

  • SHA1

    daabd1d2f8cb70ae92be129395559269fb067d48

  • SHA256

    0033ecc4f43d9e0221800134b1b9d756f212a0c617ebf408f05d85d1f64ef920

  • SHA512

    c5da6060862a5dc7afdeb36c65f3bd518d16bcf6dbf43e3734b0b00fda7abcaebce138dd292e038b7e9bddf9ec6d07712bcd7a4479e5748f473288486d4bb23b

  • SSDEEP

    24576:w30gWaUQpa6aLGrpcVqlrQ84U9UKGtmsYiIacdjzQAucu77lMnOYRYIb:w3dI76aLorQldKGt6XdP+enbRN

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Suspicious use of SetThreadContext

  behavioral1behavioral2