Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
28/09/2024, 11:30
240928-nl7ltatcqq 1028/09/2024, 11:21
240928-nf634atakn 1028/09/2024, 11:06
240928-m7xhasvend 1028/09/2024, 11:00
240928-m4ehbavcrb 1Analysis
-
max time kernel
135s -
max time network
248s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
28/09/2024, 11:21
General
-
Target
Am I Racist 2024.HD.1080p.x264.Dual.YG.exe
-
Size
726.0MB
-
MD5
23c6721db2334ba07163b4b55c6e4596
-
SHA1
fa072cbed04c62454dabd0caecc24114665fba88
-
SHA256
bb8df0a1dd931795822fe16aff7786ecc387ba809707d1dbd7886abe3d64da91
-
SHA512
55e10eb68e2c8bc63c1fb72fabb20c9c2307fd647260259066480531298cdecb08be0dce7c0086acd3b95102f3ed342632f4b9022a21a023cca3949c5f95bda4
-
SSDEEP
786432:bJ18G/IReWisoSjw67rMoF4vxnFhVHdI5yhWmeoxWY:bnUeAoSjjPMQsnFvHdgmeoxx
Malware Config
Extracted
lumma
https://gutterydhowi.shop/api
Signatures
-
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Am I Racist 2024.HD.1080p.x264.Dual.YG.exe"C:\Users\Admin\AppData\Local\Temp\Am I Racist 2024.HD.1080p.x264.Dual.YG.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4872 -s 13722⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 4872 -ip 48721⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB