Extracted

• • Target
    github.software.1.0.8.exe
  • Size 684.0MB
  • SHA256 257921a35555d31ad07cb05a838ab1003d94cdf66a12e21e6fcea5559f53280b
  • MD5 13a7194218f6eb9a77c07083b925cb55
  • SHA1 94a6f0cc15ab46749e4fbb4b986bfa095b77be86
  • SHA512 f50e461a7b79870c49b2c5cf038ee4062bf92b829f0b964e08c968e54b98a40e097312a0905348bd40f0521722293d899e3c29816bcbe884f970847a25a2d11a
  • SSDEEP 3145728:Eap5ZH27LT7u2/j2Uj1Xo5CPoe2dwBYvmIv8vxF9M:5h0fY5Soe2dxv8vxT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  lummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2
• • Target
    Installer_Expert_Advanced_v9.5.exe
  • Size 70.5MB
  • SHA256 fec0dbbd8efc74c3ec8c36f20bc30c8dd3ca13fd3207e02bc238f2ce210a7eac
  • MD5 d0f49f4ee6998ae3f8cac247cbccdc2d
  • SHA1 54a382c7868ccecd745c68977c59b1e03f21c2ec
  • SHA512 bb8e0d3fa8c39f38ccae8f4b8c00c03ef82f125993bc19d4d8ff591ec515ed97b9e804dd8b5d405236f02c749ed69de327faf725a51cc5940f388c432a1e85b7
  • SSDEEP 1572864:3aQp5ZH1MgjI7Ti+se7j+zitPy/MvxF2q2nUj1kCHFgtfj5Co:5p5ZH27LT7u2/j2Uj1Xo5Co
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral3behavioral4
• • Target
    MicrosoftVisualStudioActivitiesAddin.dll
  • Size 133KB
  • SHA256 511adda9d3cb91db6f85f72fc7b9003f8dcd01b1d7f37838bc1dd47c5307c7ae
  • MD5 8c362e52788cad17e55d197fc210e6bb
  • SHA1 179f256da3447e68aee9c2676b6b7d23b3efadc3
  • SHA512 8fbd63b4025f5eba778583bc53c9b69b7d4f78e0c083f6df6770cb342661b150770d06f55c369b545df84b8e7a0ac4e6cee905f7de3fb5fcaf9031dc7f177abb
  • SSDEEP 3072:QpuPif5ucMLf5xedhPzfK7mQM+ah4IEoriAvblV/EGZSxeD2:QpuPiRucMLf5naKIEorTSGZx2
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral5behavioral6
• • Target
    MicrosoftVisualStudioLanguageQuickSearchFileNameProviderresources.dll
  • Size 19KB
  • SHA256 d03e478f21e73c404c9f31c6a310a5589971cc3fec72e95e598db66f06b748ca
  • MD5 b053d9e7821650ae4471a6d0a63bbc18
  • SHA1 42313d0978053258ca0e52b7ef5eaf466147d496
  • SHA512 77d60c6e3742b8e5e2379dff52ca2f6644dc36097665a7def04f0d916d53dd90b80f7ce8ad9af07ef398b5bb662b0d053b900c9059d14a38e6cd966d1b5e60c4
  • SSDEEP 384:XMDfG7uWvhJWr7QA0GftpBjstkLQ+ILKHRN7C6lBRc4hg0:cK75EyiqqLQmXRci
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral7behavioral8
• • Target
    MicrosoftVisualStudioTeamTestTestGenerationCci.dll
  • Size 370KB
  • SHA256 e3f8686069d409d3bbe7ff48f78aef8588dd6835926501c8e4c9bf0fcf233982
  • MD5 d67781be7900f048c5735f4ecb0cbf1d
  • SHA1 5ecae46f829fafd4a88d936d4d44fcd631720f81
  • SHA512 25ac60d42a7e2901016329f373775e708186781ea1ab92ba441456afb8c2a4c3b342580d6d92a1ba629367e5d8a7cbf0e20e8f7b4307acdf749ca466874f1681
  • SSDEEP 6144:YARM2Xq9IR2+O6Z4HkxHbjhZjU8W0veyu:YARQiik4H6TU9r
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral10behavioral9
• • Target
    MicrosoftWebDesignClient.dll
  • Size 612.7MB
  • SHA256 6f2d82ec3fdeea87ae41e9fa82d4587c783bd13243c99019edf940e5bf084e80
  • MD5 7239f14216d995c4dfdd2addea178733
  • SHA1 33e7d2c30805cc349d3eba8862b647525b649798
  • SHA512 1d544052621227b39e081fbbcd8d92a10ef2d1dde06da00e4b5203a5660a2fb9f8b0bf390338130affe88c360e65545b5ca253b1ba2f819f4e36e23deffec955
  • SSDEEP 1572864:dixy6eLj0Rb5rDoGzyYvyhTaL73jZ2tNxFcyMn:doe2dwBYvmIv8vxF9Mn
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral11behavioral12
• • Target
    MicrosoftWin32Primitives.dll
  • Size 23KB
  • SHA256 6be673c77342d98f7357dac06389720ee671975de04c0ce74b21d862b3a38294
  • MD5 55e25a5e904ebc60c13bd36273d728fd
  • SHA1 d0896f31738bc8ba9443654a2a630bd1e9b0a9f5
  • SHA512 74079cdd78bd2a0b90813c25c92e32c249dc862220c2ba3c4c8974b01a06f084fe214c040e871d5e2870859c8b43d6a1b43fcf0c2744230b5a063b3be88cb72e
  • SSDEEP 384:w265SW/m3Wf9T4y50ZSxR9zusgzW8iHRN72UPCIWF//dJR9z+5OBz/:w28SU5P50Zi9zu4xTPCIWF//dj9z9BL
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral13behavioral14