Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

App_Install(x86).exe

windows7-x64

7

App_Install(x86).exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    App_Install(x86).exe

  • Size

    648KB

  • Sample

    240720-wzcbtsvfng

  • MD5

    346b5b93484c9c69f927c4740f704ebb

  • SHA1

    d3bd0c8ef5a213c139bf65ded10ca25050cf3bf6

  • SHA256

    a396584d840f2f5b563ff0c933c4d5df1f45716c9ac0daa5f7deeedb5df459ea

  • SHA512

    499fb67630f010fbce62705351b0f38dcfa04639f1c02e3dea28e79bd03c1ba5169361904f791c3bea40b04a291cafc377006db27204751ba9b8bea217e66557

  • SSDEEP

    12288:61IID/zdArU9gXv69C/J9LAaspmFEXZoMWt31xiwMfnlecPn9r8oYrmc19Q+be68:CldyU9gy9mzxMW

Score
10/10
lummastealer

Malware Config

Extracted

Family

lumma

C2

https://kaminiasbbefow.shop/api

https://reinforcedirectorywd.shop/api

Targets

    • Target

      App_Install(x86).exe

    • Size

      648KB

    • MD5

      346b5b93484c9c69f927c4740f704ebb

    • SHA1

      d3bd0c8ef5a213c139bf65ded10ca25050cf3bf6

    • SHA256

      a396584d840f2f5b563ff0c933c4d5df1f45716c9ac0daa5f7deeedb5df459ea

    • SHA512

      499fb67630f010fbce62705351b0f38dcfa04639f1c02e3dea28e79bd03c1ba5169361904f791c3bea40b04a291cafc377006db27204751ba9b8bea217e66557

    • SSDEEP

      12288:61IID/zdArU9gXv69C/J9LAaspmFEXZoMWt31xiwMfnlecPn9r8oYrmc19Q+be68:CldyU9gy9mzxMW

    Score
    10/10
    lummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks