Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    20241001fecfab9e9ab673233f86f017b737df6fhijackloaderpoetratsnatch

  • Size

    9.5MB

  • Sample

    241001-gskbjayblg

  • MD5

    fecfab9e9ab673233f86f017b737df6f

  • SHA1

    7ae1cdf08d3d8c0a494121c9a93e123c0fdffa5c

  • SHA256

    ab1056137f6bd63c2005889bd3643fff3e6958a039c4c5563319a8de6cd6bdec

  • SHA512

    877c5f3b41dcd15c368a3014122f21751d76c352cba2b1641e9cc82aaf0118c267ce724f3e6f52a2fcd8328cbaef9effba852bb1b7f0c219bb30d0d77364057e

  • SSDEEP

    98304:OyzcoE+ecjECo8Vy0TRI6ZPO6fjezEj+iM:f5Ry0e

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://reinforcenh.shop/api

https://stogeneratmns.shop/api

https://fragnantbui.shop/api

https://drawzhotdog.shop/api

https://vozmeatillu.shop/api

https://offensivedzvju.shop/api

https://ghostreedmnu.shop/api

https://gutterydhowi.shop/api

Extracted

Family

lumma

C2

https://offeviablwke.site/api

Targets

    • Target

      20241001fecfab9e9ab673233f86f017b737df6fhijackloaderpoetratsnatch

    • Size

      9.5MB

    • MD5

      fecfab9e9ab673233f86f017b737df6f

    • SHA1

      7ae1cdf08d3d8c0a494121c9a93e123c0fdffa5c

    • SHA256

      ab1056137f6bd63c2005889bd3643fff3e6958a039c4c5563319a8de6cd6bdec

    • SHA512

      877c5f3b41dcd15c368a3014122f21751d76c352cba2b1641e9cc82aaf0118c267ce724f3e6f52a2fcd8328cbaef9effba852bb1b7f0c219bb30d0d77364057e

    • SSDEEP

      98304:OyzcoE+ecjECo8Vy0TRI6ZPO6fjezEj+iM:f5Ry0e

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks