Trojan-PSW.Win32.Lumma.aean

Trojan-PSWWin32
Detection added: 10.11.2026 14:05:16 (GMT+2)
MD5: 12CD966CF7B04A60B6EC4294B7926C32
SHA1: 1EC35DF95DDD57518AE9F882A0D1DB8C901C65DC

Behavior: Trojan Program (Password Stealer)

Trojan-PSW are trojans designed to steal passwords, user logins and other confidential data from infected computers without using keystroke logging. Such trojans extract passwords from the files used by applications to store them.
When launched, a Trojan-PSW searches system files and the registry which store a range of confidential data.

Platform: Win32

This malware is in the Portable Executable (PE) format — a file format for executables, object code, DLLs, FON font files, and others used in 32-bit and 64-bit versions of Windows.

Systems affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP, Windows Vista, Windows 7 (x86/x64), Windows 8 (x86/x64), Windows 10 (x86/x64), Windows 11 (x86/x64)

NOTE: The hash is only listed for the first detected malicious file. SHA/MD5 hash is not intended as a security/antivirus solution; it provides additional information that allows you to identify known malware files.

How to prevent infection

  • Use up-to-date antivirus software.
  • Install the latest updates for your operating system and installed software.
  • Use strong passwords and password management software.
  • Use caution when opening attachments, accepting file transfers and clicking on links to web pages.

Learn more