Extracted

• • Target

    000.exe

  • Size

    817.3MB

  • MD5

    24e969edce8790040180f8e0903e71b1

  • SHA1

    ef7b408ee17e0e4deafe68277001a1004049f944

  • SHA256

    e53358b7c580456d6c5a905e46924fab8da680aa53cbdfbff52bccf90860eded

  • SHA512

    0e5c0f8cc707bbc8c4221124bcee44cfa4efd16cab960071a21eb50ad116f63122e783270ec491cd30059fb45b7bdeeae9e3a8660aa9213ba9e0503f8cc556c9

  • SSDEEP

    393216:Cc5rHAS4wPHoLDS4SvOeqyw+uPFoHo5IW7Vgu5r8NE5I:DILDPX

  Score

  10^/10

  lummadiscoveryspywarestealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2

• • Target

    $TEMP/Animals.xltm

  • Size

    98KB

  • MD5

    d188dffb127c18e7847b9171135b9514

  • SHA1

    b0bddb968c75273cd600a4552709a94ebe4a6b50

  • SHA256

    0f61ae582957485d0c966050072ff6e61a5ef2292b01fd0983174357feb4d9f6

  • SHA512

    be3c06f33fd30cd61ac445de0ffd63c759dec70a650669389b1fb3a68146d68c1505f2ea561c36b9a2cde6dc47f648b88fa44cca26c7ae2a0c1709a868e22242

  • SSDEEP

    1536:yUAgA/HTJ90rnTqk06jR7PqHCefdjEmiyzWSOOIvBg4JnVNpAVuAaS/ZnBUMh:kJmrnB0YPJeljEJ7S9kJnVMVuPgZBUMh

  Score

  3^/10

  discovery
  behavioral3behavioral4

• • Target

    $TEMP/Are.xltm

  • Size

    69KB

  • MD5

    2ca7882bce3d00fb5dc4b61a062fdef1

  • SHA1

    0d423ee1d58fb3f15b87a7d990ea1dd75318f4ca

  • SHA256

    1d04c20ac110bc216286aa754fa8e475905938f19b82fa8bc42c3473c1a7d17c

  • SHA512

    1f9e4dfb053d793f0114eee1e09de8ea92a262d2cd31e21572e8ef3954bfe4138c2a07a9434e9bbb1b7af532718d4def21efb6f0d1c6a6e19f69a5cf381b2252

  • SSDEEP

    1536:JkerCMbHxeu0awCgNa4Qr5+RtBhNvhmzBUxdBPFwSYfNfj4:nCyku1dgGrAb3No+vFwh1f8

  Score

  3^/10

  discovery
  behavioral5behavioral6

• • Target

    $TEMP/Dentists.xltm

  • Size

    70KB

  • MD5

    5fad4d9c44cf0263b2b6835a3383a835

  • SHA1

    bff691c465df3257648b2b264349e82409db20bd

  • SHA256

    2310c79464bb43dccb6a5962bc017b3da0a18505f7fb64415cb53f8a85761f2e

  • SHA512

    d977758ad78eedf3c10595195104b6438bd107167fed0bca29acc7a15b9614ca2e82b25f7c7ef8229f02e0cdfd253a441a25ee98d107299ddd1c10751609c02c

  • SSDEEP

    1536:0hdJ391OxGY6Tkkz3Jds8SDXXjwSV8T7dGAW7gY:CvvxYCP3bs8SD0SmXWd

  Score

  3^/10

  discovery
  behavioral7behavioral8

• • Target

    $TEMP/Http.xltm

  • Size

    71KB

  • MD5

    0334faab1996e83bd802089ba9cd1cf3

  • SHA1

    45268890cfbcdc9179b36de742cd0a6fc9b1674a

  • SHA256

    8793eeba5e05046be2f81130981d753169beaa0a80132ceabe8b0c64809dae7e

  • SHA512

    816f5f99296d484399f00c28d3587c21f907d96cf7fc8d0148ad8a2640cc821628c9cf107842b6719761d518476d97c36939a5c5d988584c9d08867b4dbd37de

  • SSDEEP

    1536:xwIApgb6rAfSYceKx4nKA1SGCkv9vtTmHcojtLSLyY3lVPZO7w:uH5rA6AWA1SGCqfmRj5qRlVPZz

  Score

  3^/10

  discovery
  behavioral10behavioral9

• • Target

    $TEMP/Opera.xltm

  • Size

    18KB

  • MD5

    f08fb2c77ea13dcc716f6c13b62eaed7

  • SHA1

    51486cbe02019c5bdf2e557b7cf42309f5f50804

  • SHA256

    f0d15066f9af7d87c80fc3e7408014d08ad8fb55e33ece47c956774b799d9f44

  • SHA512

    57e50b3cea8ccaf1dc2d08b417cf6acd178d71d590ecbb4c6ab662464b1dd7d5f3e120837a3d069da732e861e68e2f3164138185872ef458b71c86d2edde79a3

  • SSDEEP

    384:lPKGZN3M6vk2va/U4PQ09ko8GtVsVQL1J2YLBfLm45+zayQeTFCI68r:ly+8R2va/tZb9Rlz5a

  Score

  3^/10

  discovery
  behavioral11behavioral12

• • Target

    $TEMP/Platforms.xltm

  • Size

    56KB

  • MD5

    73181df9d7db2e27d805a39a176f58db

  • SHA1

    6b411c77393b3e2b36e457bfaef2595471eb4210

  • SHA256

    cc9bc4db96f8b2fc3f0058492d583b8ddae6d213bd0e4007d0660a678d6e7b45

  • SHA512

    1d5d17c3b5b269282dd2d2d2dc0fb440cd7531f700ebd6560596d1c47e2751eb18e8593dca64928c94d7f2a48129c11143b030258d00a16a1441f84374b58fbe

  • SSDEEP

    1536:vI2QZgCkPiTbHlrsjUMrYt2miP7G13axiVhAHkPz/:vCgxiTjlAtrkjqG/ACz/

  Score

  3^/10

  discovery
  behavioral13behavioral14

• • Target

    $TEMP/Problems.xltm

  • Size

    19KB

  • MD5

    0db6283b3e3d5d893b783b46d53ac505

  • SHA1

    886cbf7d79cce549a1136fb6e9425c9b6aa84258

  • SHA256

    4983bb5063403361e7164f65d853f98cfe42079ef16480b814d7a0973f893324

  • SHA512

    f6a638b235cbc4e8677edeaf8b206a3155f14bc7a51abf932dcad1cd6b255209d17ae920487a696440b942be2d1b26f0cdcb9d442f0a99d6ed1127baec52c3fd

  • SSDEEP

    384:zHDnlGGBKt5s2YD026HHKDcr22AfNJF6D6K/Wzw51kqRAHmjws:TDnl+t7Y0HKDcK2AlJFwWzw87g

  Score

  3^/10

  discovery
  behavioral15behavioral16

• • Target

    $TEMP/Registered.xltm

  • Size

    92KB

  • MD5

    3a6ac3475dba71dfc298603eeca23956

  • SHA1

    1d01e3efa3c5d4abbc10199486f32c0e866f98df

  • SHA256

    9cd3aa3a06b2aab66a4956bdb5875d9b4f07d2c41254593ab9d15e08c82978aa

  • SHA512

    9feda07129ae913902f9f7c5207ad0139c8462073365ca19bbc0de4c7c966d4cf4f13866884b6a4c0438ac27707fb1600ca1632e0ae80f9b8e63925735d5dbca

  • SSDEEP

    1536:CgIWV1FVfENpUCP6J4eqMETT0cp8OOLWGh16Vv8dLBdnPwYwYOGYQcy2h2fz7gJD:3ppENplSSnTTZCLWGKVEdL7lwYO92fg5

  Score

  3^/10

  discovery
  behavioral17behavioral18

• • Target

    $TEMP/Xnxx.xltm

  • Size

    56KB

  • MD5

    6b838b964a714ceb075c1530d92c46fb

  • SHA1

    17cfee6ed0cc62ffbfbb3045c6985da8cf072863

  • SHA256

    e053dc79bb7255ec9f393ee70eb38c311a08b3ff77bc3646a00bcebdd95a7dd5

  • SHA512

    f767fa79da73ed50d530d246efb14d7f766f3678f29e7091965b58f5c2a950de3c5373e03d4d58b51ab35880db1113c346735ba086cfc477d1ad061e270cbf3e

  • SSDEEP

    1536:NkdZfrEiCK5HYKGnINbA7+J7jMh8HsXQMuG:NRiZ4GNVwhKk

  Score

  3^/10

  discovery
  behavioral19behavioral20