Extracted

• • Target
    setup.exe
  • Size 1.1MB
  • SHA256 f57829fccab2aa91f23ab2a8779fc7aa93bf5eabd1010bb3479580989f6bce45
  • MD5 7914fee0bcdf274c736e4b874f5932e5
  • SHA1 6f3bd5f73ab22ec0374208f0ab866a741fc741f4
  • SHA512 5c16d8bed3f9f677ec17a7eaca1ae075bb52049110615e68310961494c2a45e0363a9dcd5f5719d0d45e98da03f92c922a5074fc79fd182c96171ebc318fdb6d
  • SSDEEP 24576:Xk5ejyWljm/dHyB9E8HOrmYYHfUZkPuvV8hW8Fs1MLopesJo:UgjyWZ5E8utYHNmvV8hWys59y
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2
• • Target
    $PLUGINSDIR/nsExec.dll
  • Size 6KB
  • SHA256 8165c7aef7de3d3e0549776535bedc380ad9be7bb85e60ad6436f71528d092af
  • MD5 08e9796ca20c5fc5076e3ac05fb5709a
  • SHA1 07971d52dcbaa1054060073571ced046347177f7
  • SHA512 02618317d6ab0302324aae4d3c5fca56b21e68c899e211cfa9412cf73820a1f931e56753c904fd7e510c638b4463aedbfe9536790279e096ea0387b67013e0c4
  • SSDEEP 96:/Uspq2y5jOEEQrhySvUgfj74/vvrTBzfYZA4YF3Telac1nIq/2:/erjOELhySv5f2vvBjiAflaB1nIq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  discovery
  behavioral3behavioral4
• • Target
    $TEMP/Anchor.pdf
  • Size 25KB
  • SHA256 ca3a322de088859a77dadf4cc67da84e32d5c2a348a92856b39b5168a8f97c65
  • MD5 1aa00d01bbaec6384b73f1fea25cc572
  • SHA1 2c8da4e734a25fd25d2106eb3c88a929f69124b2
  • SHA512 cbed7136587050ae28e82b4d399639f5865194e4b0907fbb141eafef0a26139e4f9589601e46ed90e02febf0de1b1bfb3190fc54c2f6db5d6967cf2f80b44f83
  • SSDEEP 384:EiIMKjo/UxhIn2S2xYchsblFOFZVuKCoyS+4ITBNBsEC+afVAkGdRxB5FpLIQhQT:DIo/khI2S2udBFOfYfS+XB832xB1l6
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  adwarediscoveryspyware
  behavioral5behavioral6
• • Target
    $TEMP/Freelance.pdf
  • Size 40KB
  • SHA256 904447a6b4d763b2701900149d1b374352cdd5da8cb3b2fa9420f942901563f5
  • MD5 c1cf40c65fa247c0d1a490e166ec677d
  • SHA1 8d6099be0105a6c7b60e3dc78623182537c4d59c
  • SHA512 e07cb1686318204e375609063bd393440ac1408ea9a65fcf1bfbe6749b4357810cd753718a87264331d87479a3bdf6a5e92aebbfda869fa95d11c64aed2c3646
  • SSDEEP 768:JrQvbBNwT/db3B1j7pL+EuACZ9iEXpm3uAk3BrY9mFX009Ageje3dcRajSmGk3ZX:av78db3TJeXpm3urvGjjetcRajSmGWh
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  adwarediscoveryspyware
  behavioral7behavioral8
• • Target
    $TEMP/Predict.pdf
  • Size 212KB
  • SHA256 b7cace743dd710fa71dd20c028c8e8c57bace3cc5f89425a79fd8e5b2fff7b1c
  • MD5 1e25652ef596bdfd0de76dcce655cd5d
  • SHA1 b882613b559e3e5af7c4b8b094a369a01b4401cf
  • SHA512 d1e6a1e2ab17e41a657e59dabf4bc8fcc18b0baf1e9acffadf3c57076cf0b1796b8091f05143f5f18547d15761d5b4f578a9bc4adfb1df9436c8f321abd561bf
  • SSDEEP 3072:5aYJtcOSrkpRSG689ZfN0MszPWZpbF15FpFlX4gMdxIBQrvPwpiCCOKk3rGM:Q/n+sG6UFN0MsCZvFpFlIbI6LwtXSM
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  adwarediscoveryspyware
  behavioral10behavioral9
• • Target
    $TEMP/Recipient.pdf
  • Size 264KB
  • SHA256 7c845dfed30530141b0cf4073353a80a02b8cb9e8fe7921226d3c5e370d4a0b1
  • MD5 b66012196f449fea2af51a1efdf67fad
  • SHA1 3de1323474af8a5ac9df5361f76daa8c70f14e94
  • SHA512 d50912c43577f72428367e25358c0014f34b9fb601314fc27978c5aaf6976d5d19191465030377fa904233445a2972a344060419ee17f6c912090b79053ebd7f
  • SSDEEP 6144:fdculKQEl7jSlHfwVUSVK4g65rq3AG578uQEI9Bb9ptCl/Enj0Lrq:fmFjdO/wiSoHqewGx8uQE8Bbcl/HLW
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  adwarediscoveryspyware
  behavioral11behavioral12