Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    54df8a250169331b0c1fb5d7bda8de0cc07929c96f2dad0c520274b4cce79ed2

  • Size

    5.8MB

  • Sample

    240907-sjlzjs1hqe

  • MD5

    ccc56bace9623e62692ea7102275a612

  • SHA1

    69c69fac38342372f8275515a0a8a2015150ddf9

  • SHA256

    54df8a250169331b0c1fb5d7bda8de0cc07929c96f2dad0c520274b4cce79ed2

  • SHA512

    e1090aa7683d2e5c6397001c5ed824a6db85b8a01b8bf0b160b80242aa11338bac0fc645c92063f799d36c1c2feb622108068ec0309a2c0d2aa1a5f878baf830

  • SSDEEP

    98304:aCe3GmM+6ASe20s3aIwjQL7n/IJZnG5tzUaCn84tQqcdhpTjjoFYvNqZejKanMlX:nI7JBSv0PfMb/IJZGwZ6zpTjqYvRjnM1

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://provisionfusni.shop/api

https://condedqpwqm.shop/api

Targets

    • Target

      e2bec927f296f8f24164acc71a9d9dec695e9679a2643b159253572ab19c4dcd.exe

    • Size

      16.7MB

    • MD5

      94ebcaae0bd5e1390c42f5a0a71e62a6

    • SHA1

      007f48b7331fbf8f0b0706c9ffe953d803431cde

    • SHA256

      e2bec927f296f8f24164acc71a9d9dec695e9679a2643b159253572ab19c4dcd

    • SHA512

      afcb951314ac40e5a29d4461d1b376bb4cc6d7d9867deacdc61238176debca8e1e32b3eb65f43fe266a274154fbed694cdc1af81b6c8cc6f2a03ee3a64122984

    • SSDEEP

      98304:dGmcsvlgOcPk/BybOrvql8cHAKPJTjqkNHuWiXqJpClXrnp3FVZybuVB4fMGbqj:2s+OvbrgxTeUOWUqJ4hy8B4fMGbqj

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks