Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    lat

  • Size

    166KB

  • Sample

    240714-2eav6axfjg

  • MD5

    3271aaaae51790e6726549b7f45dee9a

  • SHA1

    137f65e2c610d6cbba7cc94cd95bfdfe5017b14a

  • SHA256

    59a6f86bfd658dcd639aa8f12db065db726df287b07f0530a7f144515205df2c

  • SHA512

    a4ac2d8a4050e52d3208aca56f05eb0bdf21de06cd0db3cb45f51e872a41d6c952c62760643f7055c6692435d93cf1ab1e85ed6766c3f9d2b7e5d65c5476fce4

  • SSDEEP

    3072:0LLya4KM28VinYurvok8ValLPfkgdqoa3ARcKEvVuNNtn4PB1CTRJXHkoNNtn4PH:2Eocj2n9dH5M2vkmLbOCl8wId9ROo90w

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://applyzxcksdia.shop/api

https://sensitivyitszv.shop/api

Targets

    • Target

      lat

    • Size

      166KB

    • MD5

      3271aaaae51790e6726549b7f45dee9a

    • SHA1

      137f65e2c610d6cbba7cc94cd95bfdfe5017b14a

    • SHA256

      59a6f86bfd658dcd639aa8f12db065db726df287b07f0530a7f144515205df2c

    • SHA512

      a4ac2d8a4050e52d3208aca56f05eb0bdf21de06cd0db3cb45f51e872a41d6c952c62760643f7055c6692435d93cf1ab1e85ed6766c3f9d2b7e5d65c5476fce4

    • SSDEEP

      3072:0LLya4KM28VinYurvok8ValLPfkgdqoa3ARcKEvVuNNtn4PB1CTRJXHkoNNtn4PH:2Eocj2n9dH5M2vkmLbOCl8wId9ROo90w

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks