Extracted

• • Target

    #^FulL_PcSetUp_2025_Pas$W0rd$/Setup.exe

  • Size

    25.3MB

  • MD5

    30b0026d73559a579790bfcbf420c860

  • SHA1

    3c046bfa0fc9fb4182a73ae644623d3a533799a0

  • SHA256

    5b62a7ad41c986edbb249112793628eb2f2679cfdccf9ae23b3c12cc7baa4c4e

  • SHA512

    315893a856b7230d5d88b923898fc24e3c7e48cdffd2e7a689ef1ff5d94baabc4ab75fbc3824a9cbbd52ff67652a64b8f6f39a2d3fad8a8428f18fbea7e27766

  • SSDEEP

    393216:d9jmwJGRFpRdOupOibnGa3dTYDqAp6tn9cTfCq:bjLibGmTYItnJq

  Score

  10^/10

  persistenceprivilege_escalationlummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2behavioral3