Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

21/09/2024, 00:36

240921-ax436swgqh 5

21/09/2024, 00:33

240921-awe3naxajm 10

20/09/2024, 23:30

240920-3hgnjsvbnm 5

General

  • Target

    CheatInjector.exe

  • Size

    373KB

  • Sample

    240921-awe3naxajm

  • MD5

    0df0f27aecfc29a8063f0d51b4dfc928

  • SHA1

    50c78883ecd4e77744668bbd1e72b2eaf5bc8cf9

  • SHA256

    3e71545f4b04343713c06054b07040353056927933f857b5d81ee36378b65b55

  • SHA512

    eef31af5604a1cd423622f401f5b1c9bd6ebe743abb3b7933c0febfbb565c5c0f68e9c25619a37cb2bd58142a72ba381d3c227dac7abaa052c80514d56918b11

  • SSDEEP

    6144:QH+0/UOMmtGunubZUXsDdLEgyDe4KBAfWyrIOr8mRx98402WHpXvLXQJDod5h4:Ai4xubZmsDOgyDl5f3HrZlMp/cF5

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://chickerkuso.shop/api

Targets

    • Target

      CheatInjector.exe

    • Size

      373KB

    • MD5

      0df0f27aecfc29a8063f0d51b4dfc928

    • SHA1

      50c78883ecd4e77744668bbd1e72b2eaf5bc8cf9

    • SHA256

      3e71545f4b04343713c06054b07040353056927933f857b5d81ee36378b65b55

    • SHA512

      eef31af5604a1cd423622f401f5b1c9bd6ebe743abb3b7933c0febfbb565c5c0f68e9c25619a37cb2bd58142a72ba381d3c227dac7abaa052c80514d56918b11

    • SSDEEP

      6144:QH+0/UOMmtGunubZUXsDdLEgyDe4KBAfWyrIOr8mRx98402WHpXvLXQJDod5h4:Ai4xubZmsDOgyDl5f3HrZlMp/cF5

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks