Extracted

Extracted

• • Target

    Setup2.exe

  • Size

    9.0MB

  • MD5

    5203def28edba8cdecbded67ed2cecb2

  • SHA1

    e423a81a9cc3f9440144d80a56ce5075ce574c8d

  • SHA256

    8e70554b23ba4f543189ecb533e4c7f7750ab16207b824d146bf13674004df6c

  • SHA512

    7733d6e148d99bb74a059b8a132f08b58ed1c4e826b3e8b6b9ce60a31469374ed3669524fab7133c7ff83ff1a69ba6d0e259af1cacdfdc5b4842bd8d81b3bae2

  • SSDEEP

    196608:eIALOUOl/+nYwov8FS7VVT1vAuVC2GYZwetDQ0Id:eIAL3O/MS8FS7LtC21weR

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2