Extracted

• • Target
    Setup.exe
  • Size 1.1MB
  • SHA256 a89086ac12f022d02b464b8a7493a2cb48bd043e38fa0371eac607f0f4dee5b8
  • MD5 ced4393db714dcb0571d2321c741342a
  • SHA1 a62bbc63a2200609d6331903e86a53bbbd99a943
  • SHA512 506333f091660a09405e9b7cf3d187c917c749f2a00d13f14bcedd2b56e69c1fd40a9a3f08c704aba03899193bdb1ee5c334830191af3149d171a210ce4fc672
  • SSDEEP 24576:9vldMusF2Tf15kxOqtWyHvrXgCX4nSdq434Mme55qyXnsx8yZalw:DdMBYT95jqIyTXDnq43FX5qyXs96w
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  lummadiscoveryspywarestealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2behavioral3