Extracted

• • Target

    installer_1.05_38.1.exe

  • Size

    1.1MB

  • MD5

    c992b0fbc90ee6c7f2f740d7701a47c0

  • SHA1

    66103321e59d4d04f9685bbacf6f0a8ce1e1b710

  • SHA256

    40d9b8d1d04e2cf3d876a021cd48cf15c9dbfc3c07c46f6d2e1d72f0f242cb5c

  • SHA512

    d18c24081e08eeb65a63d93e179d7bf4a46de045c90cceb3b5d72311ef9580620ecfc05b4121a0ad6a19def0ef5f9563e23b826dbb5e8f67b9fb14ff3fcd23c1

  • SSDEEP

    24576:c1uapJYfg8E+NpFFit/0oQsJkmvZsB8jRlHnSsJf+OU5Dw:HaX2rFFit/qsGmvmBaRAEfTUhw

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2