Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Loader.exe

windows7-x64

7

Loader.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Loader.exe

  • Size

    554KB

  • Sample

    240709-xjxs9szapq

  • MD5

    613df599866679f7f19d12ff86220db8

  • SHA1

    33a2f464888fd8aedd2c4cd8f79e9e43321d8465

  • SHA256

    65f8e0e219637833386b6cfe27bd2f8446a214f02149628c63dd0329501e17e6

  • SHA512

    4091dc9ce75e7ff9a1131aa200e30ca293a8619a616bce17a4f5fa6e79602848efd422be64be7af8aff3c99f75536d2ea45dbcf1d7afb0a7998a0526bf76ce13

  • SSDEEP

    12288:2Nqf82rBbd4Qlj68ZEpv/7B+WIOzys7AsMC6WReVDTKwWZwfwsBAlny7Jc23OBuB:2s82ZWQx6AKsWL

Score
10/10
lummaspywarestealer

Malware Config

Extracted

Family

lumma

C2

https://extorteauhhwigw.shop/api

Targets

    • Target

      Loader.exe

    • Size

      554KB

    • MD5

      613df599866679f7f19d12ff86220db8

    • SHA1

      33a2f464888fd8aedd2c4cd8f79e9e43321d8465

    • SHA256

      65f8e0e219637833386b6cfe27bd2f8446a214f02149628c63dd0329501e17e6

    • SHA512

      4091dc9ce75e7ff9a1131aa200e30ca293a8619a616bce17a4f5fa6e79602848efd422be64be7af8aff3c99f75536d2ea45dbcf1d7afb0a7998a0526bf76ce13

    • SSDEEP

      12288:2Nqf82rBbd4Qlj68ZEpv/7B+WIOzys7AsMC6WReVDTKwWZwfwsBAlny7Jc23OBuB:2s82ZWQx6AKsWL

    Score
    10/10
    lummaspywarestealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Loads dropped DLL

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks