Overview

overview

10

Static

static

1

GameforgeI...er.exe

windows7-x64

8

GameforgeI...er.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    GameforgeInstaller.exe

  • Size

    2.2MB

  • Sample

    230610-va5reafd26

  • MD5

    c91a3241045c7c860d03a3816dec2755

  • SHA1

    6c095bd750b5ffb721da8a2ec5e105168da0169e

  • SHA256

    5dc8e0cbd0972cb5ba345d6b31bb838cb9ef0bb9a4cfe70efd9f156d7bc98018

  • SHA512

    c5882952bcad5765f90423dd46068c89890c34c6a792fa2c6119de9c700d240a2c2e5c4144461d1d8b877accf950023a5eabbb66232a328b78716118cdb3abd0

  • SSDEEP

    49152:kBto5T8wV7oI+qco4xDL/U8ElLrpqlnAn4z+c4SG+4mOPDICVtYE9p+G:kBu5TT7oIgo4xlRDttyx

Score
10/10
lummadiscoverystealer

Malware Config

Targets

    • Target

      GameforgeInstaller.exe

    • Size

      2.2MB

    • MD5

      c91a3241045c7c860d03a3816dec2755

    • SHA1

      6c095bd750b5ffb721da8a2ec5e105168da0169e

    • SHA256

      5dc8e0cbd0972cb5ba345d6b31bb838cb9ef0bb9a4cfe70efd9f156d7bc98018

    • SHA512

      c5882952bcad5765f90423dd46068c89890c34c6a792fa2c6119de9c700d240a2c2e5c4144461d1d8b877accf950023a5eabbb66232a328b78716118cdb3abd0

    • SSDEEP

      49152:kBto5T8wV7oI+qco4xDL/U8ElLrpqlnAn4z+c4SG+4mOPDICVtYE9p+G:kBu5TT7oIgo4xlRDttyx

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks