Extracted

Extracted

• • Target

    Set-up.exe

  • Size

    9.5MB

  • MD5

    c9e23a257131677c1e5419f4950f4509

  • SHA1

    28b54a0b6762a50d51bf785557a70199bcc4c934

  • SHA256

    43694949c33a41e76431848bcda52fecaac70095e979b11ffa568ba0a0c625a0

  • SHA512

    c9b87b28a835b0bf4e76b7b27e9496bb866284948e6d1a380f0a2a21a37f4e9d942689efdc15270154cbb48d8bfd9456909765c8b32c212c26f8168674f568a6

  • SSDEEP

    49152:mGo9uGIlCGzQaODVNCZd3r9hiwpIm+uWXHAEUkgwJZpxm2TfU/LbLo4xBxh:njv8WODbCb

  Score

  10^/10

  lummadiscoveryspywarestealercryptbot

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2behavioral3behavioral4