Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    WinRAR.exe.vir

  • Size

    859KB

  • Sample

    230822-s1gq6aeg2y

  • MD5

    0ee75901470dc0d952731eb2b8909341

  • SHA1

    9437c6d4240d47163f1c259c21a9622344affe08

  • SHA256

    1522a865e9d583c3581fc19cafef5a41a7c7d0f759aaead3364045f300202305

  • SHA512

    05ce487d8085a432491c5ac0e0ed9ccfdc2fbbaa1bcc70a308b1e740e7b335f145e1fac26562df27b33beaaacffb30480a90f8a730d429647e030bcdd4f34be4

  • SSDEEP

    24576:7lmEpI67+TEqFeeergs7yavApPqD4YAcog9YlNioNMX0oN:PfFvKqWcoVibXB

Score
10/10

Malware Config

Targets

    • Target

      WinRAR.exe.vir

    • Size

      859KB

    • MD5

      0ee75901470dc0d952731eb2b8909341

    • SHA1

      9437c6d4240d47163f1c259c21a9622344affe08

    • SHA256

      1522a865e9d583c3581fc19cafef5a41a7c7d0f759aaead3364045f300202305

    • SHA512

      05ce487d8085a432491c5ac0e0ed9ccfdc2fbbaa1bcc70a308b1e740e7b335f145e1fac26562df27b33beaaacffb30480a90f8a730d429647e030bcdd4f34be4

    • SSDEEP

      24576:7lmEpI67+TEqFeeergs7yavApPqD4YAcog9YlNioNMX0oN:PfFvKqWcoVibXB

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v15

Tasks