Extracted

• • Target

    Nexol.exe

  • Size

    400KB

  • MD5

    452a78e8f8426755df51232f79625d03

  • SHA1

    77ef222547c42d9c022f39e1ba1ef14295e2fd71

  • SHA256

    6260e990f752752a447c4fa2d65de92c6c793a9b725c55794c9e03270c143b47

  • SHA512

    546432493e592a86c3b05dd9ad2c0a9fb0d46f2523d3b9f36a8cb14a972a05ac6bc1686ca08bac987642c9b864df7f0772f7536738ab459dd2ef1d54106982e0

  • SSDEEP

    6144:80bS4ZyK0FboqEMJYYPN/6Ur3uZEqRryQml3khxPZ61yV4MWYguHOsvOX5LR4T6s:80b9ATBNPLuZUiZW84QguHjeRgP

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2