Extracted

• • Target
    NеwInst_[UPD!].exe
  • Size 1.2MB
  • SHA256 a083ba84f3ff9cc83191da42c43ade5a32d0bd39fd52ed18d79b493be800f918
  • MD5 9f42968b6bbcd1c0dba7190ef9420348
  • SHA1 1ca86005a0b052e912708a6ce0dc8e278530d9e5
  • SHA512 64ee2571581bc06d8ac7c3653beea8a5db0f79f1ba58e0c4067cbde128aded27759b4396fc5102dc7313bac52a50884a179898fd9191f7d64a8db40c6c0dc9bc
  • SSDEEP 24576:y0aZpRMlo2/5gHGsyBI+HanEAaQfXYbD+A3CgNzzcSMDbVdyBQtZhf5cJJvpJM28:yxRMd/5EGxC8DD3/IbbjZhRA+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  lummadiscoveryspywarestealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2