Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

349486df40...cs.exe

windows7-x64

5

349486df40...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe

  • Size

    5.4MB

  • Sample

    240602-eszp4sbb72

  • MD5

    349486df40b77f1eeddd15341a5b6480

  • SHA1

    32244c78ddbd2014ee3200670c7943182d2198f8

  • SHA256

    831a0ca34afaea27fce94cfb1b5a35c6e3badecfd4227b3878cb7599ec36ac8d

  • SHA512

    a0b311fcf24ef2eadb4130e1d02ec6b6c3379ceba54daa3ac86636ac2319ad6860e6105cad67c8f70e686c9f3b1c761a9e87275b373ea2abbaad8f18c7ff435e

  • SSDEEP

    98304:oKgInPKxhom+kacJfAvddBijwI3uwTd0tMz:oKgNxhom+FcHkQ0tMz

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://valuablestraigwhi.shop/api

https://horsedwollfedrwos.shop/api

https://patternapplauderw.shop/api

https://understanndtytonyguw.shop/api

https://considerrycurrentyws.shop/api

https://messtimetabledkolvk.shop/api

https://detailbaconroollyws.shop/api

https://deprivedrinkyfaiir.shop/api

https://relaxtionflouwerwi.shop/api

Targets

    • Target

      349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe

    • Size

      5.4MB

    • MD5

      349486df40b77f1eeddd15341a5b6480

    • SHA1

      32244c78ddbd2014ee3200670c7943182d2198f8

    • SHA256

      831a0ca34afaea27fce94cfb1b5a35c6e3badecfd4227b3878cb7599ec36ac8d

    • SHA512

      a0b311fcf24ef2eadb4130e1d02ec6b6c3379ceba54daa3ac86636ac2319ad6860e6105cad67c8f70e686c9f3b1c761a9e87275b373ea2abbaad8f18c7ff435e

    • SSDEEP

      98304:oKgInPKxhom+kacJfAvddBijwI3uwTd0tMz:oKgNxhom+FcHkQ0tMz

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks