Extracted

• • Target

    Codex.rar

  • Size

    15.6MB

  • MD5

    afe31fd838fae3a3f3fb46bc6875b8bc

  • SHA1

    10923315babb259fbe8218d9a7945f71fef0ed6b

  • SHA256

    0b42eeb661e4cf8635ef4205a17073a5ea97143dcf042579540fd9d1a225bd4d

  • SHA512

    dc969f33e442dcfa63a806090d357b4310c75313a44bdbe4400bab6215e91a2f44da994fe736d15c12ad00d85d348d7356e6d27ef8da2043f615766bec1d152a

  • SSDEEP

    393216:nnYQSVHxqK+caxy4zhzp+cWU3LkGmlXJ4PcNamsCWxIt+YA:qVHxqK+Nzpb3ZWyPcfsCWStVA

  Score

  10^/10

  lummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2