Extracted

• • Target
    Git.Setup.v1.0.6.exe
  • Size 746.4MB
  • SHA256 ff09d2d0705a33305c6bcb65ea25fecb58baa7353817bee998dc84c2edbdec60
  • MD5 2467a1537e37c768ad8b6cbb96b75f81
  • SHA1 b88d2ba6214e46e9cce843e5d02516f605915125
  • SHA512 e7dcdbdc836dcd62179174c74a04852c7f6a76d69c5edddec3713c2c3ee44567bf1927233ec95d5db134796099c87ff56b7e404549c771588f1e7bf1a9d1311b
  • SSDEEP 3145728:EkKU5arqHoe7yQqCiADnyjzJUPlasUxPZ9snyHtVFH3:fKU5ar9e7pqGDnU+mF4yNVFH3
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  lummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2
• • Target
    InstallerInstallWizardGenius_v1f.8.exe
  • Size 66.9MB
  • SHA256 3c193e246078a9954d6c4309c95e22de6df06c0c7c30356b4be3b1a6d1779d1e
  • MD5 80c487dc93b8bdb8ac16fb7a51a05ce3
  • SHA1 967f864f57b5caf8f2fbf8588507d053e1ef14d6
  • SHA512 ff831e21f8747c350e9312e480653e91d0cae3f866b0ed54dd36b8f1e673b075668588ff2847b389c07a2bdbe6f7784d85c4049505f5a88b729831bc9fe0f93e
  • SSDEEP 1572864:nGLKk35T1B2hxdkHo6Z/10adW+yQqCOaiACWnyjtj:8KU5arqHoe7yQqCiADnyjt
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral3behavioral4
• • Target
    MicrosoftTeamFoundationDiff.dll
  • Size 37KB
  • SHA256 5e9bd50b91c5d6ad41f3ad301eda80c8f50e7a6eea5e3ae8c8b241fde00f40b0
  • MD5 d8001d7ec58bfc0f9baf1c157518e0eb
  • SHA1 e79c54f07a7586f22ecbcd7c5751e869464899bc
  • SHA512 4c9233ad9db91a6b3acf11cb4b1f6512a1d8c08c8f261131cc4ff8b38b257251b6be4bf201fb62ca67c4cb2508680c1b4058f6d6d568e801508a2f58b23d7659
  • SSDEEP 384:ahePRxQx7XgEiRKOl76+uwqddrVcN9noppqyn/VrnCePZHdWa6JWv7QA0GftpBjU:7ATiHUwmVgnoppdNrCq+oyi5m7H0k
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral5behavioral6
• • Target
    MicrosoftVisualBasicCompatibilityresources.dll
  • Size 678.2MB
  • SHA256 ee896e9d4266341325448961b440bbb37c63c49a6f8fad12ebe47f1e52cba4ca
  • MD5 512fa62b8a4e621e1e15e56cff87cb66
  • SHA1 4cd06e5d7c342513a1660fcb22459f4898a21554
  • SHA512 67f64c2c5ae55cc213d8ad566d612bc7bd8c8f0c88300ecf50d782f6dddae833cc2e094ef8291cb69fdcc6630fe6b545abbe62e458511a8c1d2b5adbea05b700
  • SSDEEP 1572864:VJI3OrWj39gslaF69Nux8jwhNZ9ONYKnyHVvhOINrfG4UpqSbWU:VJUPlasUxPZ9snyHtVFHM
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral7behavioral8
• • Target
    MicrosoftVisualStudioPowerProfiler.dll
  • Size 53KB
  • SHA256 0d15db8f1b39f2ce25cbc0526660f422d232178e28d82d56e72a8ab84cbbfe23
  • MD5 b4c29120120e8ef70c647969056fde0b
  • SHA1 38fa9f718e8b1de5fe6166e363907a903688c085
  • SHA512 753353df3d439b005ed53bac77cd1e3e7dd2cff6799022b29e0af116de5a806753cec4ee14855ff8f94f99cf74d7be442b49f0d279001d4e56638d086e33bc70
  • SSDEEP 768:1XjzlsJsC1epl2T0q+8pL/9RfRO+RfI7ieEBC:1XjGJspp8KQRfRO+i7hEBC
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral10behavioral9
• • Target
    MicrosoftVisualStudioPublish.dll
  • Size 836KB
  • SHA256 f072e7aa4ed163606c322c4c2ddfc4376b74748643d518e6652b6b642f68a24f
  • MD5 1f1fee2670babaee19d8b13fbf519be9
  • SHA1 69bf0491ce6ca863547b5b913364a97c8df17186
  • SHA512 6e98658f4e5952ee3fd5e7e80d253646299570a191aa9d15e89ec00ba7627cceaf42faa62c2a4e15247a97a98d508ab1973f3e2fb99d92281db633a5bd92ae20
  • SSDEEP 6144:GgIaWBizRHpMzGRwbE5l9dsJ/7Ypsye9hMInSoDEjp62ScYKI5FFf16:E8ppRSVnTRRcY3
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral11behavioral12
• • Target
    MicrosoftVisualStudioTemplateWizard.dll
  • Size 112KB
  • SHA256 4f0bcdfdc077141582dd8e5536b927db9ef946246e6ec17e66af650043553f6d
  • MD5 bb64ba795f2214d059b8fd7be907ca7e
  • SHA1 49d27371622e028a54332cb0c004e96938479fcc
  • SHA512 63c7aee76d7d5daa4cfb7e9a5c40d3b89609bbc862c61983208bc587f51267ba9db4d5cba12c3f0f70a2f9d489252ae64069b483a36526a836c6624ab0984065
  • SSDEEP 1536:YSU9VMPf3GYip6NJ1ZsHiplzHkUKcp/BTNuiKTb+dkKygmb+:24PTNJ1ZrplI7cp/BpuiK3Ukzg++
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral13behavioral14
• • Target
    MicrosoftVisualStudioWebPageInspectorRuntime.dll
  • Size 103KB
  • SHA256 b35fb8039bb5d440fcd4d657045e382d3f8558dee620150a773e4dcf7d09f7dd
  • MD5 2b9e8ee4be7070961632724d4ca4be97
  • SHA1 669bdc48fdb4ef3433f6e038267b00ca16b50c24
  • SHA512 c8a557610f0346d4405bdbb68d99d14669899284fb646070cd4b844c2ec9518d4930da2afddf0e977b4d81d87f6d776c21500b74adb7d5d36af32366c2d15e4d
  • SSDEEP 3072:emXW1vmOWSTC0akzI7hXIXh2vdfxrHa37qoA:emk1VCg3hOB
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral15behavioral16