Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Iaunch3r_Esy.exe

  • Size

    41.0MB

  • Sample

    241013-gdtaws1hph

  • MD5

    b4dba5f4370f7a53e344242d825ade1e

  • SHA1

    4729b3a56191a404db64dca448f00d0b449dc53c

  • SHA256

    d2f9f3c9ac687269f2f17d62a25206b92e474110afe8a88236f939c2e16eb671

  • SHA512

    ea58d903ce96f696b68881624150a5ea97219cd4c8b80a7b7d95faaa1d670b00e22a07a26177702fbb93f1e146404043f2b21d3d2a6972a897a88c88610d2467

  • SSDEEP

    196608:sytkzBQ9jn+rbXakHieCo+1E2MqG/Qi7skfvVsfzj1o3qs1aVk:sseBQ9D+rWL1q/Qi78do3qs1a

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://richardflorespoew.shop/api

https://strwawrunnygjwu.shop/api

https://justifycanddidatewd.shop/api

https://raiseboltskdlwpow.shop/api

https://falseaudiencekd.shop/api

https://pleasurenarrowsdla.shop/api

https://feighminoritsjda.shop/api

https://marathonbeedksow.shop/api

https://backcreammykiel.shop/api

Targets

    • Target

      Iaunch3r_Esy.exe

    • Size

      41.0MB

    • MD5

      b4dba5f4370f7a53e344242d825ade1e

    • SHA1

      4729b3a56191a404db64dca448f00d0b449dc53c

    • SHA256

      d2f9f3c9ac687269f2f17d62a25206b92e474110afe8a88236f939c2e16eb671

    • SHA512

      ea58d903ce96f696b68881624150a5ea97219cd4c8b80a7b7d95faaa1d670b00e22a07a26177702fbb93f1e146404043f2b21d3d2a6972a897a88c88610d2467

    • SSDEEP

      196608:sytkzBQ9jn+rbXakHieCo+1E2MqG/Qi7skfvVsfzj1o3qs1aVk:sseBQ9D+rWL1q/Qi78do3qs1a

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks