Extracted

• • Target

    setup.exe

  • Size

    684.0MB

  • MD5

    a28cdc3698f9ee1b75c804480cf228f3

  • SHA1

    b0b12c025e829062eeaa166649ca6ebaa1b4e3ac

  • SHA256

    6b523706b0012c420a93519d246586d3b19e845b9b3736adf61e973ed059870b

  • SHA512

    be51f3bdeabc3332dd6555655012a7bb0aae1c5c42999bb66bed888bba48181b9d2bdd434f2b5c3dca0bb277e68ed1d08af818451f9ad17665ca0da88b21bda7

  • SSDEEP

    49152:RdSZ4HDQNJL0VR6SgMt+k4RiP+RmXMjiINiMq95FoHVHNTQTEjT333TYqlvIB:euHDYsqiPRhINnq95FoHVBT333TVd+

  Score

  10^/10

  discoverylummaspywarestealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Downloads MZ/PE file

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2