Extracted

• • Target
    ⊳🔸 𝐒𝐄𝐓𝐔𝐏2.exe
  • Size 1.4MB
  • SHA256 f667c428b522dde24c5524da99fdf375e3fed0ca92977f0890eb72e21e2178fb
  • MD5 2af5068f57164b15ab2da10f956f243c
  • SHA1 81a299a54ba003b307d84a220c697907bd960b54
  • SHA512 da761bb422af4fa8df32eaaeacb1b3d14fd0024aeb9bdb68b19a672f38168c65b34e6ae39411fb9cc61f538a16871f8e565f4e4e539cff982de9c0c3b2f33cbf
  • SSDEEP 24576:RVDATV2yrKLfFBWVMSiZxkHGhSPAFvF9um0rhikQWbkC146dRn3sxVCL2Q:R2luLfTDAGsPdBrEkQWt146Uo2Q
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  lummadefense_evasiondiscoveryspywarestealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Modifies trusted root certificate store through registry

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

    defense_evasion

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2behavioral3