Extracted

• • Target

    ЕхternаlMеnu24.rar

  • Size

    71.2MB

  • MD5

    618df5ea544ab68a64ffb3e830fe79a0

  • SHA1

    0d9530d5cb24f17391c87a787f1dcc04e69f9eb0

  • SHA256

    8b5e93bab534453b3e4bd822fd888ef89ec94fc4edcd802fdf8867f8bcdd4883

  • SHA512

    dd503421de12f73bb2c4c86328e683cab1c4cd72879a17e8bb2fda67dceec07f427f228cbac9ceb8b7fc774f2f4049a9f1ea42485edfed44e94cdf81255f84c0

  • SSDEEP

    1572864:4i3A7NbKMKkxcFMkky2SuL8W0zHfebyius+zyI6uHFBDXhzy82jG1:4iiuFM39Unmenz36uP5yBa

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2