Extracted

• • Target

    Nexol.exe

  • Size

    350KB

  • MD5

    3b74f9fa57267f104cad29ae462c591a

  • SHA1

    468d086a35fad0dfbe5ced669a559581f100c087

  • SHA256

    440eb5deff4296eebe9809934b459070125736a3cfb59f989642f7bd15a3ed67

  • SHA512

    dd2eb4e843918d520ff81fb9dff4977fba84d71b05ae0418f11e87b441ba811940a2beea35925cf4b0ecc3be2d24e7e029a1d4ff44c782b53a60a77c9de10324

  • SSDEEP

    6144:CBx0zkVHADVXoPbchIpRKenbVF4r9b/E3FU2GuN6dmlBYpm0ZWRifY3:C/0jK4hIvKprp/aGi6ckhWX3

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2