Extracted

Extracted

• • Target

    SoftWare V2.1.0.exe

  • Size

    938KB

  • MD5

    945cd2758d8c6ad39758a9be9bc9d183

  • SHA1

    c0856c9df43f598af9e5ec7be51e0172fe47d9c3

  • SHA256

    c248a06cda93d7d5dc8cf79bd4b00007110139a67a3f1ecd68cc9ea5db84b69d

  • SHA512

    c564b8a9c01418c8141fe1933bd739fe514de81f9d60590ab31cabfd58a4c7b6c719b97c8d3a69d81ab1059051e75ff7c89f79f06b598b79dafc49915f393e92

  • SSDEEP

    24576:hwvsLw7d1MaGrLkhilsrf719nfLSWAqixqhCjj:apMaGrLkhP/fLNXPCv

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    SoftWare V2.1.7.exe

  • Size

    620KB

  • MD5

    553d2164ba72fd00fc1583e6c1537491

  • SHA1

    0f58db9c4639f61324278b87fb4976f23ee4c5fe

  • SHA256

    15be6cc47f2dfda06ccac645c1bade87bd59028ec2a572eb905b7f5a81e8c0e4

  • SHA512

    096972b9333ccb379a82378036f4e1fc1b404d4768b430dce89035e6bce04311ff4e4c7498fd4a12e4409f86d5710546263218bfcf6a23ca217e48b4d0cc81fa

  • SSDEEP

    12288:r82UNTMlKa8IjOv43y9THoifOZ3V81Sh9ZCHwok5ujLVPKS9vdldPgDiJzzZM1H9:wdTMDvjOv4KH/OZyue

  Score

  10^/10

  discoveryredlinecredential_accessinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Loads dropped DLL

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral3behavioral4