Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-10-12_ddcba1f78922e417004a19d6cee9c455_poet-rat_snatch

  • Size

    3.9MB

  • Sample

    241013-adhqtstajj

  • MD5

    ddcba1f78922e417004a19d6cee9c455

  • SHA1

    cca66ceb1183f92143fa220790f7cccffe738578

  • SHA256

    591df8534fccbc9386d61316a2271a46edcad0348dec1f9bbae1cac981d5dc52

  • SHA512

    0effec49f298da4f9b5035c2be0eb1bbedb5d6e83c5b648648952c1f6a636574ec65f6e446aad083e94ab4bdfd6f38006995f03788d310784e44ebee5d87dd1c

  • SSDEEP

    49152:gpgAaPc5+0ESTmalvEnO/2S2rf6JRvjiS6WcpNnbxn6WtB:Egw5+0ESzlqVrsRuS6Zpzv

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://drawwyobstacw.sbs

https://condifendteu.sbs

https://ehticsprocw.sbs

https://vennurviot.sbs

https://resinedyw.sbs

https://enlargkiw.sbs

https://allocatinow.sbs

https://mathcucom.sbs

Targets

    • Target

      2024-10-12_ddcba1f78922e417004a19d6cee9c455_poet-rat_snatch

    • Size

      3.9MB

    • MD5

      ddcba1f78922e417004a19d6cee9c455

    • SHA1

      cca66ceb1183f92143fa220790f7cccffe738578

    • SHA256

      591df8534fccbc9386d61316a2271a46edcad0348dec1f9bbae1cac981d5dc52

    • SHA512

      0effec49f298da4f9b5035c2be0eb1bbedb5d6e83c5b648648952c1f6a636574ec65f6e446aad083e94ab4bdfd6f38006995f03788d310784e44ebee5d87dd1c

    • SSDEEP

      49152:gpgAaPc5+0ESTmalvEnO/2S2rf6JRvjiS6WcpNnbxn6WtB:Egw5+0ESzlqVrsRuS6Zpzv

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks