Extracted

• • Target
    file.exe
  • Size 3.9MB
  • SHA256 02c22cb54244b9a05b47ce93046dbdbdee3724ae33e63799163975eaad85c698
  • MD5 483208958a2041f4cfe497027eef415b
  • SHA1 51fb181d083dcfcbadeaa142a50a213dc598beca
  • SHA512 d07c41fae1b34ccf4d81adbe0ff66412bcfadb67a60a1e6a2abb41996fc317c15f2c6c0fae2f28b8a7d8614f2e7174834b760d5c83a5f4bcc82d0ddda1ef7ef2
  • SSDEEP 49152:2btE4jdDSqB8cXJcVDS8GUBewy7WLlQ2zHAg9oGTX6EMbXkH:23dDSqXXJ+Jxe17ON8ATX2j8
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  discoverylummaransomwarestealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1