Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

05/10/2024, 20:46

241005-zksbaascjn 8

05/10/2024, 20:46

241005-zkbcrssbrl 3

05/10/2024, 20:44

241005-zh861ssbnl 10

05/10/2024, 20:43

241005-zhz84sxape 1

05/10/2024, 17:42

241005-v94ndssglb 10

General

  • Target

    https://pub-9c4ec7f3f95c448b85e464d2b533aac1.r2.dev/CAptcha-Verifications-Approval.html

  • Sample

    241005-zh861ssbnl

Malware Config

Extracted

Family

lumma

Targets

    • Target

      https://pub-9c4ec7f3f95c448b85e464d2b533aac1.r2.dev/CAptcha-Verifications-Approval.html

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks