Extracted

• • Target
    Aura/Aura.exe
  • Size 533KB
  • SHA256 dea98a88803caf3843401d91cbd22be0412b3d22393ee50a9a08efd34052a083
  • MD5 106261b3414a009549eecb0dfa8eb52b
  • SHA1 0c40118dea5b6071c68811887a1e88615f6e02ec
  • SHA512 e4ccd6c7369aa124c227ca051a34a1d7058838c24af606031c6bb851c913f76cb35c886b54a0c25900239e85e19456245df3b60e52e3827e1be672ba5af544e9
  • SSDEEP 12288:SVRaZCLIN5/0Qji5gkJSwvzjOi2B+l3hayppyhOEO:SVEEL08Qjie8/LSi2gRhabYt
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  lummadiscoveryspywarestealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2