Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-10-05_6b216faa79e69015e9663fb9c544a841_poet-rat_snatch

  • Size

    16.6MB

  • Sample

    241005-rwg1paveln

  • MD5

    6b216faa79e69015e9663fb9c544a841

  • SHA1

    94e38897713d97d0affac8f2d0888f3d93f60edc

  • SHA256

    844915ce35ba238257b1ea5dc13b5abacd5af89b7ac4d325cca8762a4c728db3

  • SHA512

    66c240aefcf7888229be178cdb0406595388a044e8d18ccec66413a90563be79793e1e13737c3dc890c8de5dd898339e4bf5d4f4e596e1c0537aa60e178f8fe8

  • SSDEEP

    98304:GEaIgmIiEobXiJKRsbVXwp9Dt2WDDfy5VAZN+83bzkWEbg3:2MEKubVXwpLLfy5VCN+

Score
10/10

Malware Config

Extracted

Family

lumma

Extracted

Family

lumma

C2

https://frannykamj.store/api

Targets

    • Target

      2024-10-05_6b216faa79e69015e9663fb9c544a841_poet-rat_snatch

    • Size

      16.6MB

    • MD5

      6b216faa79e69015e9663fb9c544a841

    • SHA1

      94e38897713d97d0affac8f2d0888f3d93f60edc

    • SHA256

      844915ce35ba238257b1ea5dc13b5abacd5af89b7ac4d325cca8762a4c728db3

    • SHA512

      66c240aefcf7888229be178cdb0406595388a044e8d18ccec66413a90563be79793e1e13737c3dc890c8de5dd898339e4bf5d4f4e596e1c0537aa60e178f8fe8

    • SSDEEP

      98304:GEaIgmIiEobXiJKRsbVXwp9Dt2WDDfy5VAZN+83bzkWEbg3:2MEKubVXwpLLfy5VCN+

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks