Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    tera14.zip

  • Size

    29.8MB

  • Sample

    240921-efgnrstenh

  • MD5

    6548d61374d80065810401552665a33c

  • SHA1

    a66fccc4542290776e2cebbd585858d8ebfc4bd8

  • SHA256

    6d8a4ad90fe9e228e39f576ed197f0b6461a8a8fb4329cd9fa006f2334de29c3

  • SHA512

    0eba3a9c3e7237ee5298ee3cf65b62b7196d4e783827a899ed2e99fd81320959e897f0f848a70d3000d1b9c55941e79f89844c63d01dd975951be8c2acc4a8d5

  • SSDEEP

    786432:VggqugvEwiLPoGJQF2kF1xEOGmVU0mGmV8JIcRDqKnw+:ygqugv9+QG3kvGf0mGkcRDqKnw+

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://ohhyhousedmxznw.shop/api

Targets

    • Target

      tera14.zip

    • Size

      29.8MB

    • MD5

      6548d61374d80065810401552665a33c

    • SHA1

      a66fccc4542290776e2cebbd585858d8ebfc4bd8

    • SHA256

      6d8a4ad90fe9e228e39f576ed197f0b6461a8a8fb4329cd9fa006f2334de29c3

    • SHA512

      0eba3a9c3e7237ee5298ee3cf65b62b7196d4e783827a899ed2e99fd81320959e897f0f848a70d3000d1b9c55941e79f89844c63d01dd975951be8c2acc4a8d5

    • SSDEEP

      786432:VggqugvEwiLPoGJQF2kF1xEOGmVU0mGmV8JIcRDqKnw+:ygqugv9+QG3kvGf0mGkcRDqKnw+

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks