Extracted

• • Target

    setup.exe

  • Size

    80.0MB

  • MD5

    c804e1074af9d7cffa16e6bd084bea42

  • SHA1

    dba96c1d8dd56520fcbc65b1d1dd0a8da91e81c5

  • SHA256

    d0710b55aa4f4424d4b14ad320e6615dc230f2af271a1f260ea475141f9d0091

  • SHA512

    950a9a8822cb6df38d710cf1341a79ce25e76e8f145471167dda49f8e6c9e9b22a88836d51ee69b4770c69cef3d161be7fc408de336d1d8a53f1bbad40accadd

  • SSDEEP

    24576:0/8vj/qTTY54U9wn04+riuApVGgH7x86jeIGyghi:HKrHn8Xy3HtjePymi

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2