Extracted

Extracted

• • Target
    recuva_professional__technician_(2024)_full_español_[mega].exe
  • Size 861.5MB
  • SHA256 4cb62341a6927d2275a5291d1c7ad50cd0e6df850fd382d076bc469381a96e29
  • MD5 b97ca6334f704951c92b9056f75e0b43
  • SHA1 22816d771d1eae99483726b173f516a462977c12
  • SHA512 597429a496cec12a6021c985ee2ec0773c9ecb2419d6078efe3b96f401db46ff5e9eb36eba54625db0a64e3b78d09b502565394114ada36fac55a3a99070ca05
  • SSDEEP 196608:twbiVwpwj2ZPNkVCUWcnYsBblbjjx+1tQkw:2biV+ZPO6cnZfbjjx+vF
  • TLSH
    T1DF99AD12BBD980B6E477423489BB53AAE335BC150B3196CF6200BA7D6F777D10936722
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverylummaspywarestealeradwarepersistence

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2behavioral3