Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
28/02/2024, 15:53
General
-
Target
Temp-Spoofer-Lifetime-main/Loader.exe
-
Size
690KB
-
MD5
9ed99bd8432a2265d1f5fb611213168b
-
SHA1
e215f6bfcbc91ed8828ef54cb6840eae1dc72cd0
-
SHA256
dde02744526968833651a9f70be666ceec221599b03272c9c5fc5d729667dd72
-
SHA512
f75b9ad6823ae8c4e4f5c84202893ba60c9256853d8b3924d47d59a1668e979e485a920b43414b470c5e5fd02975ff81edea3c9a2ed3a16140c13170224f2f28
-
SSDEEP
12288:snlipr+FaVITo35RRLyAuilkjA/xZGHr9W8aSt2kTNvif8jedCLLA2Z:QipJIg5GFAp/St2qif8jMCLL1
Malware Config
Extracted
lumma
https://secretionsuitcasenioise.shop/api
https://modestessayevenmilwek.shop/api
https://triangleseasonbenchwj.shop/api
https://culturesketchfinanciall.shop/api
https://sofahuntingslidedine.shop/api
Signatures
-
Lumma Stealer
An infostealer written in C++ first seen in August 2022.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Temp-Spoofer-Lifetime-main\Loader.exe"C:\Users\Admin\AppData\Local\Temp\Temp-Spoofer-Lifetime-main\Loader.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1504 -s 11842⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 1504 -ip 15041⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
604KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
604KB