Extracted

• • Target

    b484b5356d00aef00d35c1339aa0c8937f2725cdccc06156d1941ca6bf63efb5.exe

  • Size

    372KB

  • MD5

    ee00befc0e8ddba06dfa8510902aff79

  • SHA1

    7af7a60d99c8cea7c9d64e87ef2a4bfa56199328

  • SHA256

    b484b5356d00aef00d35c1339aa0c8937f2725cdccc06156d1941ca6bf63efb5

  • SHA512

    a063c2b216955531a8661436eb8ffcbf0f43870e459f942f629e7586ff725adcb4b7da36063412716e961c88025a16aa30450adad86045202280065c99632b81

  • SSDEEP

    3072:SA3jy8PU2hlpXQ+nIdw4ziY0T+0oU/xil8NLuimFRTxgZX+jJGDCzA4O6VG5Du9S:zmMAs+WiPzT6V7DN1HuU319Xi

  Score

  10^/10

  lummadiscoveryspywarestealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2