Extracted

Extracted

• • Target

    refx_nexus_4.5.17.exe

  • Size

    793.2MB

  • MD5

    421a48bd40a5f106ad5deb45ce5544df

  • SHA1

    e10329037ea520b2935070abe9ed25d3b2c1d7a9

  • SHA256

    027ffc79501cbef364b66eb1ed4cc0db213eb7aa2bc4bf30c8d2b52815c36ee9

  • SHA512

    c3a5b0ba4640eda54f25e9419b6c2811790ee4ab20f45af02f599a5453613cf49098175e3ccbf8142edbed93644f6bcc49816d53e7cfadbf762e678a9c06b975

  • SSDEEP

    393216:WfdIAmhCcTzIFvdK+ew0E8j75IYGWxTZae5qndVmzuhyxE+RuHXM0H:cNcvIBdgj5nnQ8y

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Enumerates processes with tasklist

    discovery
  behavioral1