Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Laun4er!_PSWRD----1889.7z

  • Size

    9.0MB

  • Sample

    240502-16bfbsfh8t

  • MD5

    5fa7a701e0a05313ae1b40102ede0389

  • SHA1

    2960cba4ef1a0fde8f8dea5b317d35ef1ec63fea

  • SHA256

    f1c2c0985ce7dc4ec3e51dc52ca5af913b3177dab18b6a2f9fefb7f1a0a5c7bc

  • SHA512

    83a2ed56044f5fb7f1bcbdfb747363455e42aab970f700bdc56e7434cbc5644e14c953ff5b6392d04402f68d22d312729f2fea17d042e8aae46807932c9ab660

  • SSDEEP

    196608:0rMa/IGuTieVXUtPs5iO/zMp1WzNDuMYZsNZST:JNXqk53MqzhutZX

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://templecharteredowis.shop/api

https://acceptabledcooeprs.shop/api

https://obsceneclassyjuwks.shop/api

https://zippyfinickysofwps.shop/api

https://miniaturefinerninewjs.shop/api

https://plaintediousidowsko.shop/api

https://sweetsquarediaslw.shop/api

https://holicisticscrarws.shop/api

https://boredimperissvieos.shop/api

Targets

    • Target

      Laun4er!_PSWRD----1889.7z

    • Size

      9.0MB

    • MD5

      5fa7a701e0a05313ae1b40102ede0389

    • SHA1

      2960cba4ef1a0fde8f8dea5b317d35ef1ec63fea

    • SHA256

      f1c2c0985ce7dc4ec3e51dc52ca5af913b3177dab18b6a2f9fefb7f1a0a5c7bc

    • SHA512

      83a2ed56044f5fb7f1bcbdfb747363455e42aab970f700bdc56e7434cbc5644e14c953ff5b6392d04402f68d22d312729f2fea17d042e8aae46807932c9ab660

    • SSDEEP

      196608:0rMa/IGuTieVXUtPs5iO/zMp1WzNDuMYZsNZST:JNXqk53MqzhutZX

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks