Extracted

• • Target
    Galaxy-Swapper-2025.zip
  • Size 3.0MB
  • SHA256 1584794785972e30325c72995378a046ac86475091b10f73b417861f09aa7d28
  • MD5 3593b3a62673484651c0735ff30c3c8a
  • SHA1 10a7a618b4132f38dcc2ad914cfd12e3519879f5
  • SHA512 bd77defc95c65058147c001e06102ad75dc9e0f847b1c7068b6d48c507c411ae85e76f51d835d00b3a338042efa57b86c9a6a9fd105cdd6a5fe7aea6f6c94dc6
  • SSDEEP 98304:uFEMQYfDJF+njhV3G9ps3PaD4NjEQjha7:A/QYLn+njhFG9pqakds
  • TLSH
    T173E533B55270F2A668C4C7F14A4031704DF2E254989F52B6F6B73207F9498B3E4BDA93
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral1
• • Target
    Galaxy-Swapper-2025/Galaxy-Swapper.zip
  • Size 2.9MB
  • SHA256 fd455411526b1877bf81c90bdf4639671af9e59cbce724dcaf58a1df0257eaac
  • MD5 780c263d59d3598672d0d63fd0b11726
  • SHA1 bd18ac6cfc07ff853cfc97b612bf2f59fcc3146f
  • SHA512 df4409bebd9c23419c71d05cd946a762a5df30c90eada702f92735a86f290bccb1c8c7d5eb380d53265f07064a637755f0ee97a1ec66cafed79b38b0a52e7919
  • SSDEEP 49152:GvOVnFjfy/AMWQ1XyGZGhLPJhJkwNmRTsfjS0L+/mRfEkBcsjT/Tc5:GvWFTyZXhfGpJhJ3A5ejPL+/wBcsjfW
  • TLSH
    T154E533643350F2B9589083F10E9031704DF2A6A0495F95B5E6BE315BB6DA8B3E0BE7D3
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral2
• • Target
    Galaxy-Swapper.exe
  • Size 1.1MB
  • SHA256 a7b76ac94f391fb78c3d176542fa42fb6c34a22eaed86ec43c9ea8e26d2b31fc
  • MD5 9850cce2ed0b2f419c026bc97eb4f9f3
  • SHA1 5c679300d1963dac18e5e68030645ebba76e91ef
  • SHA512 35a93e6c8f4940bf0939ffb9d61e459a4765838e36d65cf9d558c713b569b3b9bd0a0c95cc5fa6eab1ef5a9bcca484125631f622c3096ad069e393cffb0d45c3
  • SSDEEP 12288:lt2BxheJBtYqmlf4feLUqJ2kAGptEVnN3Dv13BsnMipoMex+p03HGUjfsLKdy6QI:iIaJbU8CDsMixexOQs6QhKb7Azk
  • TLSH
    T1F3354CBF31AB3549FE624C30AFECB660CB57287ACD6BD9F14592A03029350D2EC56917
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverylummastealer

  • Family: Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Suspicious use of SetThreadContext

  behavioral3
• • Target
    d3d9.dll
  • Size 1.8MB
  • SHA256 91e0b91a628c32113dbffd820cbe219a55f54d68b4aedbdcc849c70ee3772223
  • MD5 7b7447b345be7891c781915ffb1f4dce
  • SHA1 891a05f75b952880136426f409435ece5d5b7a0c
  • SHA512 8976d11781f610360b5c2aad70648107bdbdc1c99cd6a1c146162743312dea56f8a6b0ba35dc040c1a098369eac13a055c7a8157de8611d34b4e79d2c2b213e8
  • SSDEEP 24576:1SwHWp3qWhlDzf6uNEQbaYv2KUYPMQlZh9OPXwBxNcBWgskrh8j/2L+qblg9nP:12p3qWjzf6uaYv25LKxH4skdL+qblg9
  • TLSH
    T189859D2A67B880E5C5B7813CD517CA2FEAB1B424036057DB11A4863D9F7BBE0653FB21
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral4
• • Target
    d3dx9_24.dll
  • Size 3.4MB
  • SHA256 1ec422bd6421c741eef57847260967f215913649901e21dd9c46eb1b3bb10906
  • MD5 b165df72e13e6af74d47013504319921
  • SHA1 c45b192cf8904b7579bbc26c799aa7ffa5cbb1d4
  • SHA512 859b6cd538735e5cc1c44f63d66b25588ad1ad32202cae606ff95b8c4a80f6a66db9ef7c5d43820010de9334b8bbbfb079939ce89ba0b760f5d651d7fa8268ed
  • SSDEEP 49152:oKcfEwqx3mAEXywKYlip1rq1UzMYdBf4Uhn6bZy4rW4uosdBxn7LFU:O8f3R4YN6SrhBpLFU
  • TLSH
    T1B7F53982F1F1C1E4D2269038B596B613EA717408071857D797E08E6A2FE7BD86DFE384
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral5
• • Target
    vcruntime140_1.dll
  • Size 48KB
  • SHA256 0e560532e721b6938dafe4055eedd0251ba5eb5994cd96937cebbcf16a7ddae5
  • MD5 7e986e7469d9ab3b1138353418da1793
  • SHA1 77903692aae688f6d5b04511d5006c66ce4daf8b
  • SHA512 6c8951ae9a0e329cf32eed8bf32bd83294e7a1cf7f16dd716cedbed4caf39e56e62c5f639091f9711922443ada7dbc61dffcace093211d70a85821f19883cbea
  • SSDEEP 768:uzzO6ujT3MbR3vXCz6Sz2q83yvjdsrU9zcgElebe9zVFZ:rq/XU63Cjd9zcZebazDZ
  • TLSH
    T176235C9067788486D49F95B0C1D6EF537D78FAD24B40968F0BA0D1982F637C1EB3D21A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral6
• • Target
    Galaxy-Swapper-2025/LICENSE
  • Size 11KB
  • SHA256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4
  • MD5 86d3f3a95c324c9479bd8986968f4327
  • SHA1 7df059597099bb7dcf25d2a9aedfaf4465f72d8d
  • SHA512 dc6b68d13b8cf959644b935f1192b02c71aa7a5cf653bd43b4480fa89eec8d4d3f16a2278ec8c3b40ab1fdb233b3173a78fd83590d6f739e0c9e8ff56c282557
  • SSDEEP 192:fU6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEn7HbHR:M9vlKM1zJlFvmNz5VrlkTS07Ht
  • TLSH
    T12432623FBA48037706C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  execution
  behavioral7
• • Target
    Galaxy-Swapper-2025/README.md
  • Size 2KB
  • SHA256 5997d7f9df7cbfc2ad5c8f56c29e5b193b7992732849dd6f6928653bdc183b8f
  • MD5 fa2ac3539130fdb29ff2b1bbf918933b
  • SHA1 ffdf9fb9b2a8c5ca0a189a848ee91ef48c1ac401
  • SHA512 3ce62045821396865457d73819a4e675d75c24b44f0c76627d04e5634a954c61de7df65571ee3b5e8ffdfed751e562843a0eeef07d238c9e6016ea1f0f640084
  • TLSH
    T18341740315B33FE12F9F80DE888108896259C1F962484A2960FC819DC1DEBB4D2FA764
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral8
• • Target
    Galaxy-Swapper-2025/assets/Galaxy.jpg
  • Size 125KB
  • SHA256 852da419d332a9a598d348d6ba0546e2b990d3b9c09ed60fbf67f7e70100a399
  • MD5 2a6b965ea6d953b7fb98e7005acff9ad
  • SHA1 ea9df1f3baeffd7c1094fdecc69582bf3c305c49
  • SHA512 da161b4a914be7de2c5c984202e2bb8a986515677a18496b85efadb3e7a02a2f490bcc076e686c783ddccf4977ca5f4e14ff24adac654c7ab3aa6e397a9a1493
  • SSDEEP 3072:d5B56RQ3OCRoEcHYoKyPHb7XDHG7JtsO+orfFz8YW2iyu5Y:dR6RQ3XR9c4oHnDG7HsKrfSYTfu5Y
  • TLSH
    T1DDC312CB0E6A00754897ACCF14C54272B7FBBA47B02005273FE5E980BE27B761679B16
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral9