Extracted

• • Target
    SecuriteInfo.com.Trojan.BAT.Agent.25725.13599.exe
  • Size 1.2MB
  • SHA256 70cb76d3e06a949fde026a778b952676a69968b3f6b17ee29cdb36a2097939ab
  • MD5 5f4a9d053573569d545803280d0a4248
  • SHA1 481c8e8ff3616aa373512da0a816a086d3e51430
  • SHA512 b15e0af1993212e754f6d89b700abc09fb59691377503fc575d4420d3b7ddda5fe4b07f6c2b934e041693880e64c280935af8548ddae7520871bcfb5b78eb185
  • SSDEEP 24576:a0a1wbtVb8yQCKrVckvq/PNtuRkvmhDc7rGC13V385cgQ:aaaT/W/PN8Q/7rG2V3H
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  lummadiscoveryspywarestealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2
• • Target
    $TEMP/Determining.potx
  • Size 64KB
  • SHA256 5fa7362ca8358162d0aab38086f38dedd8eb2aea4b90cd63df31cfe486817fae
  • MD5 cdfa2564025215a81849c82043349308
  • SHA1 3fab11e5263eafc6af7222c3e041062949b25a03
  • SHA512 ae4a1f61947a4e9d5442bd23997ca946cd22d5423a53108e9feb0d0f4333977df017254d1ffe5512103181ff25434a969fd0c2e405023f6df45e369c34d1aa81
  • SSDEEP 1536:6y8piKA+uxJ0Ro/Oizu0POer84fbEcb81AttJ62+DOQq5R:CQr+uxJ0OsJO84fb8Ab+boR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral3behavioral4
• • Target
    $TEMP/Securities.potx
  • Size 51KB
  • SHA256 1a512c79c78134b211ccdeeee3f38e7c01ebfcff75d4c88e8427ea898f873a30
  • MD5 4acfde777225a9269c7aba6fb0c2c7ee
  • SHA1 c2d1e0a8f315668cad99d64b0fc1fe7c934dcc9c
  • SHA512 a76cd87f065d9316b4c572bc673210b860c63c29de3563e7ff22e77c115ca30954f3d475ed3351c7c42a284256c22ed65e072055a9c52961dcae95df27a51234
  • SSDEEP 768:L2kURHVxWbI8Gn/BaduKuj+TjN/bsnCqm/pnSubWk7Cl7RUTar+I7XH:KrR1xWbIp/4dhTp/bWGxh7uRUWrn
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral5behavioral6
• • Target
    SpectacularIntellectual/Av.potx
  • Size 54KB
  • SHA256 112ae6b37f83b3f32f32d23e5ad4e174de44c5604bb526872ab2fe581933a05f
  • MD5 03a61b973bd880517564d5bc4f477a49
  • SHA1 c915f612b3bff3594a7b121954bf74c6153c05c8
  • SHA512 6c8ededc75d21518361c7263386e128516a7ab7bb27482f5b88ca930162119039c6e2ef7c1eac9d153dc6cb5a942a0343afd57bceac9833812c33479123e7507
  • SSDEEP 1536:Sx426Fr39lnAvES6R9W1sxFRp1ljXHuHg3BRA:YmBlQES6RpFpHBRA
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral7behavioral8
• • Target
    SpectacularIntellectual/Diy.potx
  • Size 66KB
  • SHA256 b7ab1f8b838efb8f5ebf89ac6d2e88dd4623328de0ba51413ee3bbf369025c8b
  • MD5 fade636dfd714947ab160273ff97abfa
  • SHA1 4b7863f6ad827f8adf76f1fe87a66cfc07735faf
  • SHA512 68ca114956cba0788b65eff93959b4452047337c238833a9965bfd0d167ae023ab193064088eb33fc02498bc0b6c41be2661e9cf5ee4d9d59b476f1f9bc2e724
  • SSDEEP 1536:rFMJjoS05frxlRpb8AiUwFsvbLrOabb++XrjhEyOwdDP:h4KrfRnvrxG+XrjWyOw5
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral10behavioral9
• • Target
    SpectacularIntellectual/Exams.potx
  • Size 92KB
  • SHA256 9cd49446729365751e6145e030b10a3ef2fabb516746e66340b0a8276bc457c9
  • MD5 e5c1504320308ffea90ea26096ee7955
  • SHA1 3ad8d5ae3051c614e891caaeffb5a9c0a68f7c29
  • SHA512 02229d989505cfa0967fb6bd305a5c5fbae44e2ec4834926d2530141b695042bb745b58276759a7932daba298e3e4eacc758db8077b2ffb2cccd7a60bcf11102
  • SSDEEP 1536:N+TyvG39yiyKmXVR0nw48bZ8Y6IBDhaMYytyNfM2kIE4lISY5J9sioCQI0H:o9t5E0n8bWry2kIbEnoCQIe
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral11behavioral12
• • Target
    SpectacularIntellectual/Robots.potx
  • Size 30KB
  • SHA256 6d5be151c35bd4f550085dfc92abf9bd4ce63d4fc556333b09e344f5f7674255
  • MD5 4be97bac4acd7ce550f12b7c5f977033
  • SHA1 0141a3aa83d5c921cedb31c987a1af44b9de3867
  • SHA512 5695dee91e92941f0ddfa20e7fc3b5e6c3ab58b89b1421b64b04bd21a7fb31e3bd9f74354cdd164818c5966f8768ae7b1a3286acac4beac7b00af2cf4b971bcd
  • SSDEEP 768:7r0fOEfSRSo9j3xVty410DaDERYupnxgxGr27oV:v720So9j3jQ41HDUtnCxR2
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral13behavioral14
• • Target
    TownshipSearches/Bacteria.potx
  • Size 31KB
  • SHA256 1c91049c88be6f7e9287ed6267d6b174cbb47e456a243bc04705f4251984d0e7
  • MD5 a1182371b7b6819c7627bd84ba4c3307
  • SHA1 1035e6764c54f4e227dea72d4c439fa6c4706b2c
  • SHA512 66212dd3051463aed5f682796148ac30949e0d0ad06b4c0420bc3ad237c58595a032cf6014efb23c62d297cc1a4fb37377d41cef1e9575ae943d59baf4bb2f1a
  • SSDEEP 768:Obr4a92iaKX1jwFxTHPcO3aFWnxEpmZ5RcMh248TYA:Ob8sX9wbD73aoRcMdJA
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral15behavioral16
• • Target
    TownshipSearches/Domestic.potx
  • Size 99KB
  • SHA256 4420623da0aeb8032b3285e367f365ce9e6ce5d166136f98a4adec548d25bbe9
  • MD5 77dd6058a0964799753e9e5ba177e1b4
  • SHA1 73309aa1dc70e82cae620dcd7cea79d50ab44c43
  • SHA512 2028feb7fb336c2dc937836079cfd4406f0b16eebb7d001e07348c151df55c91640cad70da0e4688a251ddef7efa6f084f1a24f9ecb85c05e5f8c256212dff0d
  • SSDEEP 1536:9YOWOVlzRxWsg95onanEf94mK4gOLADFsDWU9NJi73ZAJowE4v0ldSmEhqzazPuc:a4nWPonh14CgOkp2n96oownQtqquOwzD
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral17behavioral18
• • Target
    TownshipSearches/Openings.potx
  • Size 66KB
  • SHA256 383156658b9fb3932513dc45eef6a269b19d1e7e8dd4323af47d466a1419c203
  • MD5 fbf119b8b23a40dadcf6b29b8181542f
  • SHA1 5000ec2aa9ceb3c87ea383bd508995e7fe17740a
  • SHA512 72c76ab2422c0267c4ecebcc23f26db1cea962756510f50f358a15680f3462ad0ca6def74393870373a02643a50b85964000449e6860a565f05d32bcbffb4bca
  • SSDEEP 1536:gOLWX4xWlLhONasB8KpucnG8APbTyVmUE5b/gwvSsSmU:R3oOXBBnG8A5pRSmU
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral19behavioral20