Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c3d9851113a89c40400c0ac454e4c1c4.bin

  • Size

    5.9MB

  • Sample

    240820-b7hhlaxfma

  • MD5

    c904f7cbb48f58be1967fe22d1afd451

  • SHA1

    c70336ccc247f391a2cf01f38c072d55d6121307

  • SHA256

    ee13017ba4b0228b11cf939f7151819e11bb255886d28b9f5218676b4f91cf48

  • SHA512

    3a433437f9151870ae3b7023cd3359735616681892f9052512e250ca32c8f68c59a086db603b32d5ad684b37f407ad45e1ddef63a06022e058211a34e62a520c

  • SSDEEP

    98304:BzSGTkTQxENyCyJYXgBEC3tILItwo3xgborUR1Z9VfA11AA32ITmYVEcs:BzSokk5Cpg330ImOCborU1Y11tGIKYVE

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://disappointypsm.shop/api

https://writerospzm.shop/api

https://deallerospfosu.shop/api

https://bassizcellskz.shop/api

https://languagedscie.shop/api

https://complaintsipzzx.shop/api

https://quialitsuzoxm.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      cc4cc56bfa3300660baab1293ed6d80d12f0b7a2350bdacb0ab6971aa1cd6f57.exe

    • Size

      14.3MB

    • MD5

      c3d9851113a89c40400c0ac454e4c1c4

    • SHA1

      a02971f91b21079bb342ad00d6675583184a52f8

    • SHA256

      cc4cc56bfa3300660baab1293ed6d80d12f0b7a2350bdacb0ab6971aa1cd6f57

    • SHA512

      32c0029fd885cbad99143344580e6684d5e53e2652c8855feaf8d40a00192ddd517c1315a956cfd4102c0c4561f2de4cb78ec53f1a7ef2a3618f62e8a01ad725

    • SSDEEP

      98304:PB+RFrTda3rckTrSij+ASw0uynrRv2MqGrTKDExwwA/rSLMv/Z:k81TrSiCa0uyrRv2MqGrTNx4/J

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks