Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

C0dex.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    C0dex.exe

  • Size

    21.5MB

  • Sample

    240503-yfj9fagh32

  • MD5

    5c365e7b25f8cf72e1914c9c79f188a3

  • SHA1

    f6d976a091bf7301c2fd0aecd60e9f1570a5320b

  • SHA256

    5525161daf624a9f7698322829334001cc92df2b9fd8a40456704db98986bc70

  • SHA512

    f7f62bd6b719a64a82a97dd98ff7ca197346e716dee090b8a650ef9785173edc9cd2da6a8dba01a532c2bc29456e3f54ef0dc95c8f3487bb2b48ee6a89cae89c

  • SSDEEP

    98304:DBwHP2Xz1zDM4++cYoFNOSN9jy7FtPQyylkGjPEyivEY3FfN:Df1XM4++Vovvjy7FRxylkGwyEN

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://hushedsombkereos.shop/api

https://acceptabledcooeprs.shop/api

https://obsceneclassyjuwks.shop/api

https://zippyfinickysofwps.shop/api

https://miniaturefinerninewjs.shop/api

https://plaintediousidowsko.shop/api

https://sweetsquarediaslw.shop/api

https://holicisticscrarws.shop/api

https://boredimperissvieos.shop/api

Targets

    • Target

      C0dex.exe

    • Size

      21.5MB

    • MD5

      5c365e7b25f8cf72e1914c9c79f188a3

    • SHA1

      f6d976a091bf7301c2fd0aecd60e9f1570a5320b

    • SHA256

      5525161daf624a9f7698322829334001cc92df2b9fd8a40456704db98986bc70

    • SHA512

      f7f62bd6b719a64a82a97dd98ff7ca197346e716dee090b8a650ef9785173edc9cd2da6a8dba01a532c2bc29456e3f54ef0dc95c8f3487bb2b48ee6a89cae89c

    • SSDEEP

      98304:DBwHP2Xz1zDM4++cYoFNOSN9jy7FtPQyylkGjPEyivEY3FfN:Df1XM4++Vovvjy7FRxylkGwyEN

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks