Extracted

• • Target

    542fcd0a40d24bc242dab43651634f3b3ee86ce6d09d6f3318a672572eca9a79

  • Size

    309.8MB

  • MD5

    a2bd47bec61c8410282904201ef848e9

  • SHA1

    a85228877aac62961b6e9ed21af467466a924feb

  • SHA256

    542fcd0a40d24bc242dab43651634f3b3ee86ce6d09d6f3318a672572eca9a79

  • SHA512

    c7c4e31fb7c285b4096ad47af09b4ca02ce9fd091424299d87e09593f3ebc6fcf1fdc66bea813e00aa85202f9fdb57426d337cb2f989bf138473698bdf15f82c

  • SSDEEP

    393216:S9Bgiz23eVHCft+UT8Ikhq+r8EPH9FtCuk1loVyYuY9CCNqD7rJiomK2v:SMsUcRr3Pd2vFtc

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2