Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    73c517aec4a202f017444ac5846413a6985f98358a3c1f4926f013bc4250b0af

  • Size

    277KB

  • Sample

    240819-rexd2s1hpp

  • MD5

    9a9953dc06ef76dfb7ef3a308340f77b

  • SHA1

    7e7764a5ebcac8c69479603faf1f72d66044159d

  • SHA256

    73c517aec4a202f017444ac5846413a6985f98358a3c1f4926f013bc4250b0af

  • SHA512

    4cb1867b3f364160b0f5d60b2104f5df381fc1d641701da8b3b65cd67e7e5cbc27ad85a95ea8ec93341a8d18767a5b9423213e82a4c0167efc85f045662c2be5

  • SSDEEP

    6144:3/oTS0v+HW2s22qrx7TsvewHP6FObyBEDMjsyUlmP0REjUYBEO:A2kEx7LwHP6FOKEDMjTKtEoYBEO

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cagedwifedsozm.shop/api

https://potentioallykeos.shop/api

https://interactiedovspm.shop/api

https://charecteristicdxp.shop/api

https://deicedosmzj.shop/api

https://southedhiscuso.shop/api

https://consciousourwi.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      73c517aec4a202f017444ac5846413a6985f98358a3c1f4926f013bc4250b0af

    • Size

      277KB

    • MD5

      9a9953dc06ef76dfb7ef3a308340f77b

    • SHA1

      7e7764a5ebcac8c69479603faf1f72d66044159d

    • SHA256

      73c517aec4a202f017444ac5846413a6985f98358a3c1f4926f013bc4250b0af

    • SHA512

      4cb1867b3f364160b0f5d60b2104f5df381fc1d641701da8b3b65cd67e7e5cbc27ad85a95ea8ec93341a8d18767a5b9423213e82a4c0167efc85f045662c2be5

    • SSDEEP

      6144:3/oTS0v+HW2s22qrx7TsvewHP6FObyBEDMjsyUlmP0REjUYBEO:A2kEx7LwHP6FOKEDMjTKtEoYBEO

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks