Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

06/08/2024, 21:38

240806-1hccqa1fln 10

General

  • Target

    Setup_v1.31.exe

  • Size

    24.8MB

  • Sample

    240806-1hccqa1fln

  • MD5

    03663b9afb57ce9ffc1aae9fd882054e

  • SHA1

    356ce09526cb48e7eec4fe7928dec57fdfd93352

  • SHA256

    1cc1c7d234dffa6d531d41db847baa50faee66d673f2bf43fb27ebab3e9ed8cc

  • SHA512

    f1d99a65724aa4ed31dc312ed784737f48d4cae443f8046d13c492cc6dc06c5f0eae1cc89231c63a70b4f202790bf2a656a88346662c13fdf68e6566bb578d35

  • SSDEEP

    98304:RB8JtamT3nuqknLK6h0YOQn7sBKZ/xMTOEmCIe8pw153XmaTdE5dY0qGCE:qHpknLKy0YOq7sC/IrmCIe8UmlAL

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://celebratioopz.shop/api

https://writerospzm.shop/api

https://deallerospfosu.shop/api

https://bassizcellskz.shop/api

https://mennyudosirso.shop/api

https://languagedscie.shop/api

https://complaintsipzzx.shop/api

https://quialitsuzoxm.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      Setup_v1.31.exe

    • Size

      24.8MB

    • MD5

      03663b9afb57ce9ffc1aae9fd882054e

    • SHA1

      356ce09526cb48e7eec4fe7928dec57fdfd93352

    • SHA256

      1cc1c7d234dffa6d531d41db847baa50faee66d673f2bf43fb27ebab3e9ed8cc

    • SHA512

      f1d99a65724aa4ed31dc312ed784737f48d4cae443f8046d13c492cc6dc06c5f0eae1cc89231c63a70b4f202790bf2a656a88346662c13fdf68e6566bb578d35

    • SSDEEP

      98304:RB8JtamT3nuqknLK6h0YOQn7sBKZ/xMTOEmCIe8pw153XmaTdE5dY0qGCE:qHpknLKy0YOq7sC/IrmCIe8UmlAL

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks