Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

06/08/2024, 12:07

240806-pahzrasere 10

General

  • Target

    Setup_v1.29.exe

  • Size

    15.6MB

  • Sample

    240806-pahzrasere

  • MD5

    e9b49c4bf59b97638b63ac11773c6764

  • SHA1

    63e713a153458c8eb41c21540e7af4c3b4362375

  • SHA256

    d6d8e2d9e770acc950d3992bfc8dfa42a33b164fb1678fc2b1416a181411ce5f

  • SHA512

    f7e5a3616511eec2c0fc02cd39e72bde4e8945e16317de82af1f497ea1600ddf2d62d3ddc038c13fab4b9f84b0bbdfef9af04424ee6481dcf00682caaf46afe2

  • SSDEEP

    98304:MUo3FB1gT5Tv7JFS5goOOT3hWQLaBEjCYxZDVeNRS+kRf:ggV7JFZoOg3hWyFj1xZxc

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://chippyfroggsyhz.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      Setup_v1.29.exe

    • Size

      15.6MB

    • MD5

      e9b49c4bf59b97638b63ac11773c6764

    • SHA1

      63e713a153458c8eb41c21540e7af4c3b4362375

    • SHA256

      d6d8e2d9e770acc950d3992bfc8dfa42a33b164fb1678fc2b1416a181411ce5f

    • SHA512

      f7e5a3616511eec2c0fc02cd39e72bde4e8945e16317de82af1f497ea1600ddf2d62d3ddc038c13fab4b9f84b0bbdfef9af04424ee6481dcf00682caaf46afe2

    • SSDEEP

      98304:MUo3FB1gT5Tv7JFS5goOOT3hWQLaBEjCYxZDVeNRS+kRf:ggV7JFZoOg3hWyFj1xZxc

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks