Extracted

Extracted

• • Target

    ChatGPT-5Version2024.exe

  • Size

    599KB

  • MD5

    906e2e800689b68629d194ba1d388a5d

  • SHA1

    e1a7213c1b565dd4fbf5c73846f7e515c62eabc1

  • SHA256

    9fcba37dbe53ff8a8e1600f25c7493524dc1c4beb6f2d7f116d0db5fcd4fe40e

  • SHA512

    fc861c25649262eb28bb084705ce5ffaea57be4b2f071627e277583aedd5ae494ce1a5efcac78a8255c079abd515d6e8144559e9145d993f3224466ed867eabf

  • SSDEEP

    12288:KRlgp3NPQ1eiEY+Iy7XMrHyDO5TwAjVw+zvIiR679iN5g49d:KRGLaeFkg8HfXw+zvjRk965gQd

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2