Extracted

• • Target

    file

  • Size

    8KB

  • MD5

    edc37d77532527d25325a22a5cbddaa3

  • SHA1

    8f1fa111602b32f6b311fc72f3402f9e00abab5c

  • SHA256

    bb93e4bc5ddf3f9f17a81c826205a56e4b8d0d043ff270c10fec4ff2b88b41c2

  • SHA512

    01a5e151d67dec87473fe5941062d6d13baf46d61be6cba694a22d5d90b2241a03fafabf71b1153d0e22731d515cd8b9aaebe3ff08257937c4909a8671280898

  • SSDEEP

    192:PN2x2BSQUHruljp5AG6Vb6rBlG3KOs3LBGcX9KHqyvAyGpHN:AxJQUHrull5Af8G3KOwLVXRCmpHN

  Score

  10^/10

  lummadiscoveryspywarestealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1