Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

21/09/2024, 01:29

240921-bwjxaayfqp 1

20/09/2024, 22:43

240920-2nh8wsscnc 10

General

  • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbkM1cFluak1OZzZsa21Ob1c3RFJfTmhLcWp2Z3xBQ3Jtc0tuZ3QtT3o3czVEOWFpUU5Xajd0VWhQX0lQdHpNWE9ZY0NnZlp5QzlTOGdiUld4TDYxa2NYcTBreGhURHAxdVVSV0JfRDlMTTlHNHlnNXhqd1VKM0N6YmIwUXZGR20xenc3Tnd0Ni1xRGhOc1d2NE9pMA&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2Fhh6g372sijmjr%2FLauncher&v=8hu5qno36u8

  • Sample

    240920-2nh8wsscnc

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://empiredmnuowq.shop/api

Targets

    • Target

      https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbkM1cFluak1OZzZsa21Ob1c3RFJfTmhLcWp2Z3xBQ3Jtc0tuZ3QtT3o3czVEOWFpUU5Xajd0VWhQX0lQdHpNWE9ZY0NnZlp5QzlTOGdiUld4TDYxa2NYcTBreGhURHAxdVVSV0JfRDlMTTlHNHlnNXhqd1VKM0N6YmIwUXZGR20xenc3Tnd0Ni1xRGhOc1d2NE9pMA&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2Fhh6g372sijmjr%2FLauncher&v=8hu5qno36u8

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks