Extracted

• • Target

    Swift_Executor+(updated+by+Libra+Seth)

  • Size

    155KB

  • MD5

    4a15806dcf5095171fe6f287281fac02

  • SHA1

    e8ae531969cab07584a18b41bdc7b1f68315321c

  • SHA256

    fe1ef348bd8eb6f02639a223792844307e8734bc75fc90988660560b36fffc24

  • SHA512

    efd919fe39608d711b1a289f2539833cf248678c383b20fb138fc70998692511628874d97147ef6b47e32d294d50e2d8878668bfb773689bfc48486dd1f2ba7d

  • SSDEEP

    3072:MIHm8gJf+JoR7qqHn0F5NRs376Pg3X1+gitcNPXFY:mGCR0F5NRsr6Pg3X1+gitcNPXFY

  Score

  10^/10

  lummadiscoveryexecutionstealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Enumerates processes with tasklist

    discovery
  behavioral1