Extracted

• • Target

    03fd3d727c6286db537d180296d23c9244708eb4183ab9f88b444d182f771549.exe

  • Size

    1.1MB

  • MD5

    108575816e00a328cba47f579faf118a

  • SHA1

    7b56265a99ebfaa714cf96643125a323bade4a68

  • SHA256

    03fd3d727c6286db537d180296d23c9244708eb4183ab9f88b444d182f771549

  • SHA512

    06141d11d2b6b7c323a66150f224e34dfe9ed33a096472f3e31108cb3556c707a78bb496f20dda627317819e176359cd9087fa55e369f8cfa43bf41f4556fe6a

  • SSDEEP

    24576:gn7QvoK8W7ThzW/nOf4NKh8zB73Hac0mXLtX4z3xJaHky/XY4O:SFW7ThzWGQ8mzB00OJa9/o4O

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2