Extracted

Extracted

• • Target

    Xeno.exe

  • Size

    720KB

  • MD5

    dea32ffbc87664069813695a8d3d1b64

  • SHA1

    6593096f605fe052367f47bcb475b39b96a6467d

  • SHA256

    cead1fad9fa0ac918eb11991ca27fb7ba11c1546d05fc0c9f85cdd9603229eb2

  • SHA512

    3318a145614124ea22fc8964ea7e70228d31bed024313a1a5e0b2dc3c607398b11445428e2d87abfa15b18f1de3313319b22be26dda18331ab5d1951496bf7b1

  • SSDEEP

    12288:p7uCt1wYZ2rhSB20AJw2uNuS3LHb4hhHK+Bx+B8NdZJWIjeFFQC5Qla7agUkzRvQ:pqU1fUhSsEbMG6dK+BxC8N7wISFFf

  Score

  10^/10

  discoverylummastealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    d3d9.dll

  • Size

    1.8MB

  • MD5

    7b7447b345be7891c781915ffb1f4dce

  • SHA1

    891a05f75b952880136426f409435ece5d5b7a0c

  • SHA256

    91e0b91a628c32113dbffd820cbe219a55f54d68b4aedbdcc849c70ee3772223

  • SHA512

    8976d11781f610360b5c2aad70648107bdbdc1c99cd6a1c146162743312dea56f8a6b0ba35dc040c1a098369eac13a055c7a8157de8611d34b4e79d2c2b213e8

  • SSDEEP

    24576:1SwHWp3qWhlDzf6uNEQbaYv2KUYPMQlZh9OPXwBxNcBWgskrh8j/2L+qblg9nP:12p3qWjzf6uaYv25LKxH4skdL+qblg9

  Score

  1^/10
  behavioral3

• • Target

    d3dx9_24.dll

  • Size

    3.4MB

  • MD5

    b165df72e13e6af74d47013504319921

  • SHA1

    c45b192cf8904b7579bbc26c799aa7ffa5cbb1d4

  • SHA256

    1ec422bd6421c741eef57847260967f215913649901e21dd9c46eb1b3bb10906

  • SHA512

    859b6cd538735e5cc1c44f63d66b25588ad1ad32202cae606ff95b8c4a80f6a66db9ef7c5d43820010de9334b8bbbfb079939ce89ba0b760f5d651d7fa8268ed

  • SSDEEP

    49152:oKcfEwqx3mAEXywKYlip1rq1UzMYdBf4Uhn6bZy4rW4uosdBxn7LFU:O8f3R4YN6SrhBpLFU

  Score

  1^/10
  behavioral4behavioral5

• • Target

    vcruntime140_1.dll

  • Size

    48KB

  • MD5

    7e986e7469d9ab3b1138353418da1793

  • SHA1

    77903692aae688f6d5b04511d5006c66ce4daf8b

  • SHA256

    0e560532e721b6938dafe4055eedd0251ba5eb5994cd96937cebbcf16a7ddae5

  • SHA512

    6c8951ae9a0e329cf32eed8bf32bd83294e7a1cf7f16dd716cedbed4caf39e56e62c5f639091f9711922443ada7dbc61dffcace093211d70a85821f19883cbea

  • SSDEEP

    768:uzzO6ujT3MbR3vXCz6Sz2q83yvjdsrU9zcgElebe9zVFZ:rq/XU63Cjd9zcZebazDZ

  Score

  1^/10
  behavioral6behavioral7

• • Target

    Xeno-Executor-master/expense_tracker/__init__.py

  • Size

    24B

  • MD5

    de4e9260d086f51e9bb63ec72de442c8

  • SHA1

    5a1c5ad27a0993fccd4e79d76763d69fdcab01b1

  • SHA256

    c37ba044b69f0af2c800182261547564aa7f74804a434a9825e63669e8d82379

  • SHA512

    2476d8fc07a23e67b8327a76cc24c56b095e500ca094a76db145099c7b412b34cbf063728844100e29ad867316efb34cfc05728deeafe9974e47cc60b0691766

  Score

  3^/10

  discovery
  behavioral8behavioral9

• • Target

    Xeno-Executor-master/expense_tracker/api.py

  • Size

    258B

  • MD5

    3f565aa2f004c833f0cce65474597601

  • SHA1

    870e75aa131cc27b52e45b521dd005381d5c7357

  • SHA256

    348c3534d42cdcf201cc49e06cd438fceadb193f30baead40635c75844926ef3

  • SHA512

    454db3a993421136737a4c1b66152c42d0ab41d442b304390586cd5c07b02da17949db93eabf1c22818a682883e4498ba319d289f9c69b600ad964129dee783b

  Score

  3^/10

  discovery
  behavioral10behavioral11

• • Target

    Xeno-Executor-master/expense_tracker/config/desktop.py

  • Size

    150B

  • MD5

    a09c35a281ee7965614bfac8fed77ede

  • SHA1

    f8c4a9f6ea90b985b9c821ed47e0677b85645077

  • SHA256

    89bcda712cd2420c8a33cac1a4fa6b52ff521d1e0861db697577fec26aa6e8fc

  • SHA512

    fe3afdca3b68b2d7c8840ffc9e3f60c3dd114f2ab8b22dbd8e06ce03115b63e4d916df7b0bf0d703b729fc03b6e2e0125c7230ed8cec4a19dd2da428cbfdb2d1

  Score

  3^/10

  discovery
  behavioral12behavioral13

• • Target

    Xeno-Executor-master/expense_tracker/config/docs.py

  • Size

    272B

  • MD5

    ff72ff91d29e5f422daae3f586032992

  • SHA1

    8e5a7599a9268b3b84d94067013e6485b883ba37

  • SHA256

    eb33569ae61022ecb6bf39aab10c998b7ef62722dafb78bbede6d558ae907f2e

  • SHA512

    2a16bf75f8ddf6411de83246f9a61efde9881206534549e49726d2e2d914fe95fc83157739a4f9fb5f6ea89b09885445fe0892996bcfdbce56675dce3be6f05d

  Score

  3^/10

  discovery
  behavioral14behavioral15

• • Target

    Xeno-Executor-master/expense_tracker/expense_tracker/doctype/expense_record/expense_record.js

  • Size

    183B

  • MD5

    27c2d8fa7923bd8dd4a6d558e2dd1f53

  • SHA1

    c4f02b1bc972a2cdac7429ba52c6dc993f9d51df

  • SHA256

    ab6e52be61a58c87770f826a0bdba06ba15ec4dc2deb7865c1dad45584470084

  • SHA512

    bc18fe90c12bec91fee4218501e56e35719e4ba1b71d94dc4d5c10614a72e7d49061b6abf56565c8914e1f0a78afb85e4295b5adc2542e5bd00a7f16876f565b

  Score

  3^/10

  execution
  behavioral16behavioral17

• • Target

    Xeno-Executor-master/expense_tracker/expense_tracker/doctype/expense_record/expense_record.py

  • Size

    318B

  • MD5

    916d63bc1db7ccea646331c643af55d5

  • SHA1

    2de7d1c8727fd390ffbb3a05e61831db07cfaa00

  • SHA256

    12005cb829ee325ed47aa26180cf1b5eca229f72b268e04b3034ed90e0bcf475

  • SHA512

    478295f9fffdc6898814ca4d9c040fbdc65e29704ab5d8382ac9bf16b5b46432424807f24418043f34462088b10c6188846b59ab3626d44448ade36b28609f84

  Score

  3^/10

  discovery
  behavioral18behavioral19

• • Target

    Xeno-Executor-master/expense_tracker/expense_tracker/doctype/expense_record/test_expense_record.py

  • Size

    182B

  • MD5

    0c7243d620bbce025858a8307591764d

  • SHA1

    ebca70e5b87c908d081f2f190e794f5de8e6bd22

  • SHA256

    c3082a769fac76db7a3abf95db5cf3aa31cd7bf45f8498962949c15d35270516

  • SHA512

    7c94141a42acc971ee2f52192003cabc322412d22603bec8fdd8875e771242e3e58fa804e66dc06cd08d6d3c1ead18fe736d60356cfc531680ff9f79295b77ad

  Score

  3^/10

  discovery
  behavioral20behavioral21

• • Target

    Xeno-Executor-master/expense_tracker/hooks.py

  • Size

    5KB

  • MD5

    693910ec7ece4aa888cb14c50572a2d5

  • SHA1

    16b16b53d842c203f9e57d0402b9e5551394bf9c

  • SHA256

    4e4628f62f940ce587f912370cac72b962af8547c452a94d2e63d1c4f02ac8c8

  • SHA512

    4b4d051b36ee055c30109cc392ec49a364721cf23afc329a4ca9fa2092d6ecc55d083bb5e11b434cdfa8774a4b9c3436e1896104dd71476e50240a2e69450b70

  • SSDEEP

    96:6JDs1ch1kQXOS25wcpAX2vPUx2EgrQIpQGPieL1C+M7O2uwLC:+Ds1ch1dOS25V+HZgrQIpQGPl5M7fuwG

  Score

  3^/10

  discovery
  behavioral22behavioral23

• • Target

    Xeno-Executor-master/expense_tracker/public/frontend/assets/FontColor.cf059e00.js

  • Size

    2KB

  • MD5

    4827df37b49184c7d3b04b5e5ef21823

  • SHA1

    cd85635dac6911efa2c3d639587e14e11e373ee7

  • SHA256

    ab61275e92ff4604b96816f4cedb05144dfa7f6b8d746a5950db4baa758813a0

  • SHA512

    219edf714932b2d44d3c678e03e81ab392d8bfe8f7a4e771ed8254c46f047cee75198d85bd90de55be0e1d94212a87c50f2b28ec8eaeaed3b90d73e1823ed1b7

  Score

  3^/10

  execution
  behavioral24behavioral25

• • Target

    Xeno-Executor-master/expense_tracker/public/frontend/assets/Home.6d463a53.js

  • Size

    1015B

  • MD5

    9e79ed0311cb94effba2a8d2598f181f

  • SHA1

    9b8bf6b96e764b1d418947c1a484872a4568a5ec

  • SHA256

    5294ea6d83835efc4dd7277c2976386e5ab7e683fdd9c6908e87413f55a74905

  • SHA512

    48d928dd61b6d2f12b854b10d0e8f841c2e2c57bf352d6610d93e77e99ef93d33cdcadfa88f50c3724d9323c4490b2bbd1bbaf25049d2ae488ec8f17345a25e5

  Score

  3^/10

  execution
  behavioral26behavioral27

• • Target

    Xeno-Executor-master/expense_tracker/public/frontend/assets/InsertImage.4aa5b5b4.js

  • Size

    1KB

  • MD5

    89f7fcb8c384e053440812c061cc499f

  • SHA1

    a9f64b428cd1718538179cd1d7a99765525ef7f0

  • SHA256

    e5c2eb809653e701d662dee370ae15879a333a3a7383990e331e18c14dce10f9

  • SHA512

    5a8c62f48c6b0743da5dd74c56666a406d9f9a2ab2410722012e923bd2e5e97460f9753a4f7fd0ee5b588e6e3c2a803b32bd18ffa50efdbe110e96a0328838a5

  Score

  3^/10

  execution
  behavioral28behavioral29

• • Target

    Xeno-Executor-master/expense_tracker/public/frontend/assets/InsertLink.30da75da.js

  • Size

    1KB

  • MD5

    a5928e4b654fd30b6120d484a989eea5

  • SHA1

    5599dea48cfb0e1f4c5092d4de12b3eb4fc68105

  • SHA256

    dbde522894e72d1e9643a17cc4069410f69924e17ddb1150e6c1b01652bea04f

  • SHA512

    22b17d31036b45390b8b143f7fb04fdab4635fb13457821f0e3b3ca2b3a8578584fcc32a1d3175a9c37abfb01128041fb5138545c77dc1f8d92f0e7665202a51

  Score

  3^/10

  execution
  behavioral30behavioral31

• • Target

    Xeno-Executor-master/expense_tracker/public/frontend/assets/InsertVideo.7d1bf9a2.js

  • Size

    1KB

  • MD5

    4489bbd71db4d7b8f42e97e6873a0497

  • SHA1

    609103f7e99e2793458e7129aa3a896ecedc4289

  • SHA256

    b81793cedd916e5221bae84aa5d04cfe559affb033a61a2e04f3fe0d70d96050

  • SHA512

    37862b2f205a7c4665004aafea8a0cc2dc899ef7edcbab6427b1ea21595645cfaec55f2df77321148ec6a6244a952a2ea7cf59cad2257ff76f1dee60972c75ce

  Score

  3^/10

  execution
  behavioral32