Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbkM1cFluak1OZzZsa21Ob1c3RFJfTmhLcWp2Z3xBQ3Jtc0tuZ3QtT3o3czVEOWFpUU5Xajd0VWhQX0lQdHpNWE9ZY0NnZlp5QzlTOGdiUld4TDYxa2NYcTBreGhURHAxdVVSV0JfRDlMTTlHNHlnNXhqd1VKM0N6YmIwUXZGR20xenc3Tnd0Ni1xRGhOc1d2NE9pMA&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2Fhh6g372sijmjr%2FLauncher&v=8hu5qno36u8
-
Sample
240920-2nh8wsscnc
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbkM1cFluak1OZzZsa21Ob1c3RFJfTmhLcWp2Z3xBQ3Jtc0tuZ3QtT3o3czVEOWFpUU5Xajd0VWhQX0lQdHpNWE9ZY0NnZlp5QzlTOGdiUld4TDYxa2NYcTBreGhURHAxdVVSV0JfRDlMTTlHNHlnNXhqd1VKM0N6YmIwUXZGR20xenc3Tnd0Ni1xRGhOc1d2NE9pMA&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2Fhh6g372sijmjr%2FLauncher&v=8hu5qno36u8
Resource
win10v2004-20240802-en
Malware Config
Extracted
lumma
https://empiredmnuowq.shop/api
Targets
-
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbkM1cFluak1OZzZsa21Ob1c3RFJfTmhLcWp2Z3xBQ3Jtc0tuZ3QtT3o3czVEOWFpUU5Xajd0VWhQX0lQdHpNWE9ZY0NnZlp5QzlTOGdiUld4TDYxa2NYcTBreGhURHAxdVVSV0JfRDlMTTlHNHlnNXhqd1VKM0N6YmIwUXZGR20xenc3Tnd0Ni1xRGhOc1d2NE9pMA&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2Fhh6g372sijmjr%2FLauncher&v=8hu5qno36u8
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-