Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-09-19_755a33949df13ef2bbe5b9d97deb3765_poet-rat_snatch

  • Size

    22.5MB

  • Sample

    240919-njxc3awfqk

  • MD5

    755a33949df13ef2bbe5b9d97deb3765

  • SHA1

    4c8682f7161f8d4a2cd66c70a3f9bfae9a957746

  • SHA256

    845cfcc1672432e89d4f5f7ace57e8f48e5bae9cb1c0bb383c265fc04517ccc0

  • SHA512

    2c8a0a73381395be04c01329cbbaf1b3331efa01e538e3c23f2a311d81b9f78690e64e8f3ad8d8510f0428de19caebfdfefc0f959d2d0aecef10e28309cf3056

  • SSDEEP

    196608:HmRN/HYHTeQYt2utpIAU/7QrGCDsfMvveI:HYKQZT+Z

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://understagkedow.shop/api

https://genedjestytw.shop/api

Targets

    • Target

      2024-09-19_755a33949df13ef2bbe5b9d97deb3765_poet-rat_snatch

    • Size

      22.5MB

    • MD5

      755a33949df13ef2bbe5b9d97deb3765

    • SHA1

      4c8682f7161f8d4a2cd66c70a3f9bfae9a957746

    • SHA256

      845cfcc1672432e89d4f5f7ace57e8f48e5bae9cb1c0bb383c265fc04517ccc0

    • SHA512

      2c8a0a73381395be04c01329cbbaf1b3331efa01e538e3c23f2a311d81b9f78690e64e8f3ad8d8510f0428de19caebfdfefc0f959d2d0aecef10e28309cf3056

    • SSDEEP

      196608:HmRN/HYHTeQYt2utpIAU/7QrGCDsfMvveI:HYKQZT+Z

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks