Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0628f20ce3e0baac5b4a402d75ec9b0328d1b585af2ac39caa6fa6c7fe055b6f

  • Size

    397KB

  • Sample

    240328-17sq1aaa31

  • MD5

    9978f3f7c1c093077290de417c1b87a9

  • SHA1

    e317b20b7eba38bdbb3489369191839001657bb1

  • SHA256

    0628f20ce3e0baac5b4a402d75ec9b0328d1b585af2ac39caa6fa6c7fe055b6f

  • SHA512

    ad48b8e614f99e28061e3a80b10de949cd1891b5094e86a05ed552c063e98eedb829d105cad19967e556464f417c033a9f5671f22ab1d292f0b87b9ead181010

  • SSDEEP

    6144:Zr3VvCrTqi/Z7LVFAFzJgmscyZtndiiuYTo4/X+shhY:ZTcTqi/ZtqFznscyZtdflHFM

Malware Config

Extracted

Family

lumma

C2

https://deadpanstupiddyjjuwk.shop/api

Targets

    • Target

      0628f20ce3e0baac5b4a402d75ec9b0328d1b585af2ac39caa6fa6c7fe055b6f

    • Size

      397KB

    • MD5

      9978f3f7c1c093077290de417c1b87a9

    • SHA1

      e317b20b7eba38bdbb3489369191839001657bb1

    • SHA256

      0628f20ce3e0baac5b4a402d75ec9b0328d1b585af2ac39caa6fa6c7fe055b6f

    • SHA512

      ad48b8e614f99e28061e3a80b10de949cd1891b5094e86a05ed552c063e98eedb829d105cad19967e556464f417c033a9f5671f22ab1d292f0b87b9ead181010

    • SSDEEP

      6144:Zr3VvCrTqi/Z7LVFAFzJgmscyZtndiiuYTo4/X+shhY:ZTcTqi/ZtqFznscyZtdflHFM

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks