Extracted

• • Target
    #!!SetUp_55209_PassW0rd$$.rar
  • Size 12.2MB
  • SHA256 310c678e23e8410611d8b58232c406ab06780ef00458e981b264d229c5a74aab
  • MD5 7143686128e92a79e171b42958454b3e
  • SHA1 ae17a82098169f8ed5bc8da96c28dd01f37ce1bb
  • SHA512 b4104e4ff27844a4335c5b316179ac3723b64524dd91afa9bfe652408d88d7a9c1c7248681e3c21ac632af14af24e738a5059e51c5b5b4c8b06b702a5acdeec4
  • SSDEEP 393216:1PyZuTyUqZfz1zGr/7fjkgscdfBPGeX+DqY/0ZPL:56mqZb1zGb7fjkgscdf6qU0Zj
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  lummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2behavioral3