Extracted

• • Target
    CheatEngine.exe
  • Size 1.2MB
  • SHA256 cb7084768cef8b1be0cc7892a9dd6a87e044ff2e6a4d5857025dada2d7a9edbb
  • MD5 281b20c2b6cb2bbe7b2f49e6b4192f27
  • SHA1 76594b61d5fe54bd2c66b479d2c3a4e7140624d1
  • SHA512 a8d4588da0ca096130b2cf823c7600adef3d82b9a718680b4128b106d078703e6b0b2da893f7c9624ee80e6570d6a491de3e6873d260f6c13ee54733085ec3dc
  • SSDEEP 24576:H0a8Bb4crwHEIAPTQ+mJNqqeeMUOTcj2nb+hPxQVOwrcRrzEcihXOP5LTL:H8b4cUR0mJNFeFzcj1xQVUzR/
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  lummadiscoveryspywarestealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Enumerates processes with tasklist

    discovery
  behavioral1
• • Target
    $TEMP/Loud.pub
  • Size 53KB
  • SHA256 7b363b19955b115e661279e017b69b4af0a7ca6de0903e08d80b4be0e520fd86
  • MD5 c8abe2dd22b0c4312de58c81890eb1bf
  • SHA1 80a430cf4193a7517d47584768c70bea8f25e889
  • SHA512 e0d530254c3a90429a802a80cae529fc429d98a8e8ca5c852e63884d5e0dae11bead331875f884fa105cdcc7425e747f017f9316d675732c792aeb0de521524b
  • SSDEEP 768:aasTHy9CQ+fhsnhNMQ/10NvxS0Qsf5Ji1pDKyVZwyDa0qHzis/K5o7b3bybrUgvx:Ejy9CrUMQ/6pnxJfGTDa0qH+H5fbgK
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral2
• • Target
    AirportsDirectors/Determining.pub
  • Size 72KB
  • SHA256 bc8ee59c9f150dd4d9ae9efa67e335a6b23598baaa4a7df63153c0866e7c9fc8
  • MD5 2ed3aa1df69f3343e90958946bacae97
  • SHA1 0bd7a13824028cc03ff6b7b6e7c5f85cb8cc6437
  • SHA512 73d14a7d80bbecb553358921a4ccde85bb818f75981451ecaf0747aa215ce4430f9f3bf094159d556b22aed106c7560b81a15d6733b5c5d3ea7a801aed03f7eb
  • SSDEEP 1536:/70Sh6SdR308UzvMnosi7nYcUA8Kie5C5TYnHFuUnPiepc+juuajS6hT:/70SkSXUMnoVYreIYnAUaeTUthT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral3
• • Target
    RaiseController/Aged.pub
  • Size 67KB
  • SHA256 69bed85a702aaefa9810b6455de4953631c18ca1aa916ce06c3dd82a706d1c66
  • MD5 647b3db1e3200f3eb2703e2f6ec77909
  • SHA1 f5f7367ff56dbd60bbf85d097b90cf24a0ede28a
  • SHA512 d8acff64ae9bd8ddddae297cfaf4db94edf305918492f919f8e2ab4788fd39b0e24b5d5fc37129e49c6c0d47023e5c80f66ebdbe1ec683372fe4fdbefeeb825b
  • SSDEEP 1536:84n3SV3MMFWsjQyxjO2107nD8GKJ/F5MKwNZXt3qVu5ciz:xCKMVQol10zIGwN5MKwnXJqE5d
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral4
• • Target
    RaiseController/Ancient.pub
  • Size 76KB
  • SHA256 0e1a90d5e84726cbf35dfd0072a1a0511cde7c96156580bf9286979d9a359aee
  • MD5 5326967a20c1ab6f5a9939a193a08632
  • SHA1 e00744d5ea68e23cdb5d7fe2f5d70d7d4d21e369
  • SHA512 a1022c58b389fb2f0371a29e31ef3b457666a837beabd8fcba30f8ca3defe6e915b434c013109bcc2bd5b61350cd6a8ed8caf95892e613a3da8f57151c9ace27
  • SSDEEP 1536:qM4/lT4zp7zdxlLskoSRmRZ677YnqGbi8NtJeYjBOeu3efdntdX:o/pCPvlAkhSc77YqyiCJeYpdtJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral5
• • Target
    RaiseController/Eva.pub
  • Size 56KB
  • SHA256 492ffc1855bd5e87c3d7d2be0ecee163d30f46dcda62c512c848a2c9544e3402
  • MD5 b71224e03d0fce7b2258f042a0b2d21f
  • SHA1 5c9325ce52c5fa08aa412eee5a89893c742f4b5a
  • SHA512 a8cd408a6ce9cbc9e48aed8c730cfa72fd736de5a6d6a00304f05c0453d0a2b2f295ef89d9ae6ae5e82b1775d5b183f1615658db4dc73f55b6cabfcf35128b41
  • SSDEEP 768:1NiVIQC11X+YsDCv1OKtGic7Q5Bf+dsPmwb1p9rd/09Z0iCc2OHXBmfnhIwN26R7:1YVZtytGic74BssPmC9rddiCq8CbmuE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral6
• • Target
    RaiseController/Fx.pub
  • Size 13KB
  • SHA256 2340d834df335e63855967d4409f68e2c244efd16793a22a911536bc6beeb798
  • MD5 7cb49277509a0bdf924855c85c4178bf
  • SHA1 afe8a361503aac7cbd8d6c5dbf1c02b12a2cbf2f
  • SHA512 2d069192bcb209e545de316d92c4c5d5e53a58904832221bbd40528a671fda7d91414937f6969606b80fd5a3cd7fd028ed29d336cc0067369ed0f928c22a0da6
  • SSDEEP 384:9EcQsTlOXSntk1Gufqh5xoCj7n1ejKtnVI:9ZlAStkKrmKtnO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral7
• • Target
    RaiseController/Household.pub
  • Size 40KB
  • SHA256 0975f51b8b520b1dcf5e0cb136c14fad2e2c177283b1f30b9c998a86ba87cb0e
  • MD5 47e249e10085e4bac27e6717390971c5
  • SHA1 9f7f438e5012f756f0de27c778bcdd11b213206e
  • SHA512 71eb1db8da8bc3498131d32154e69df35ddb4c5b4e94a89d998752eb3d798179f30d58c91aff88fc995a50931f8151a8640491b6172d5034bff9b31e4bd52f18
  • SSDEEP 768:gBH5MsiOsx+xP7LFCgwesSm+nGfMRsN42NmcQB/6lkxjhy4lBtMAoKXihV/:1ROsx+xP7L8VesFzfMavchhyqBtMAoZ/
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral8
• • Target
    RaiseController/Peripheral.pub
  • Size 99KB
  • SHA256 c7d717e3c5cf63201160c62c0d4dcfe5e857c1dc123837f53084b99112e78b62
  • MD5 e50400e6cfa56ba0087b593759a9c645
  • SHA1 b160a5b4f3630f4ff88fcae9c308c77626689e1a
  • SHA512 f734af5d853942d3bba70b46317c443b7740ddc2460af8f947040e81536be033e9c218a35714b3a5df936289c1bfab80bb1f49d6ed7e19598c5c9db4e29a302a
  • SSDEEP 3072:mhe7TyiVTHolm1T2+mMEYwsXBWKR2cVJj+wBsGgeXKF:We7TTH4mVEYJx+IsGg5
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral9
• • Target
    RaiseController/Tab.pub
  • Size 73KB
  • SHA256 e9d6b92ef5c6b056674040ea50c1d14fc3fec149ba8eb940a6473c2344f4d065
  • MD5 620fd0738c782a7e23713649439089b5
  • SHA1 2ff033e3d4a36affcdcbf610716b402b4ea0561b
  • SHA512 b39bf84b73cb8bc2bb4bc3c8019df68a3fa15588652fb1698624a76185dfd17be8bda2b70c6c0a64e72f4477455f5de71a636256bda5d14deea6207344d40f04
  • SSDEEP 1536:gQZCaSBnNjd23N6DxKc3d4/DSdiq7rGUWIkoRM+f48GHIFLk7j:gQZCJnN5esxKU0sWIkoDVwI+P
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral10