Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Ulpack.zip

  • Size

    6.5MB

  • Sample

    240720-29spfs1hkp

  • MD5

    7af54421bb1721f32f367db1ce8d6684

  • SHA1

    2a8743d1044c60833419e99d3a89785780880d04

  • SHA256

    4ab8408183648d617e24a70a4ea8f346af352f6f1b476d2e6d54be518ca969d0

  • SHA512

    4f158c5fa4f0895e7e0ad7eb15213a4795a9666766b6909bb2220a7afd64dc14bab1963a5ebde1cd7faf4da43d825b6697e0abee783548791d7f110fd0d63646

  • SSDEEP

    98304:TmWk33PIqMUkzImWk33PIqMUksjY1jzcW3PZjmWk3zmWkUs/oV0b:TmvHPI4kUmvHPI4ksjYxlhjmvDmv4y

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://celosiapatroen.shop/api

https://reinforcedirectorywd.shop/api

Targets

    • Target

      Ulpack.zip

    • Size

      6.5MB

    • MD5

      7af54421bb1721f32f367db1ce8d6684

    • SHA1

      2a8743d1044c60833419e99d3a89785780880d04

    • SHA256

      4ab8408183648d617e24a70a4ea8f346af352f6f1b476d2e6d54be518ca969d0

    • SHA512

      4f158c5fa4f0895e7e0ad7eb15213a4795a9666766b6909bb2220a7afd64dc14bab1963a5ebde1cd7faf4da43d825b6697e0abee783548791d7f110fd0d63646

    • SSDEEP

      98304:TmWk33PIqMUkzImWk33PIqMUksjY1jzcW3PZjmWk3zmWkUs/oV0b:TmvHPI4kUmvHPI4ksjYxlhjmvDmv4y

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks