Extracted

Extracted

• • Target

    furra.exe

  • Size

    8.0MB

  • MD5

    05f42a351356393179165a84086f8c07

  • SHA1

    71093fd05686d6202bf4144f94920deefe551f96

  • SHA256

    2959ff0bf986bddeb56abf2f54d30ecdc8a645311bba6c674f0aedaaa7594912

  • SHA512

    b6fe9334bbd7dcd55f9b997e502839dd8c26d058ada49a3b804d7e41ee335abb2ab4e5ab0974da5fed3532a0beb8ca9e57b1cb5e416a94803a52a5f4ba9d4c08

  • SSDEEP

    98304:s4IeiLEkjp/ABP9X6OmtVtNjgpiM+txC1xcTP8cY1JusPWBGu7oBCN7c4J+Rt+x9:s4tCpwJcY1JufL7oBH2IQxLLiU6

  Score

  10^/10

  cryptbotlummadefense_evasiondiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Cryptbot family

    cryptbot

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Enumerates VirtualBox registry keys

    defense_evasion

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2behavioral3