Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-01-07_8ca1871f59e12e4d8d7cae814956bf8c_frostygoop_poet-rat_snatch

  • Size

    11.7MB

  • Sample

    250107-nm1jwsyrdv

  • MD5

    8ca1871f59e12e4d8d7cae814956bf8c

  • SHA1

    6c33fc74658b1e8088d0037f279449e3560b86e5

  • SHA256

    48f2f430f385e1311e55df44128f8a3ef67654d2a81ae3a63f92ddb8cd745525

  • SHA512

    6865ba771c8ebc450f04b3cad356af300ef84096e6fa250477c5c27660f849e19edbfea759254ad30a765853d9baae64229366f9565e9d8611e0984de0ea2b52

  • SSDEEP

    98304:14ejT3CES6b4yULYHO3rtF3OzszTSmxA0lfiJCttOBvlbkTCLCXeo:GwhWYTzszTSmVlfiJCttKvlbkdXeo

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      2025-01-07_8ca1871f59e12e4d8d7cae814956bf8c_frostygoop_poet-rat_snatch

    • Size

      11.7MB

    • MD5

      8ca1871f59e12e4d8d7cae814956bf8c

    • SHA1

      6c33fc74658b1e8088d0037f279449e3560b86e5

    • SHA256

      48f2f430f385e1311e55df44128f8a3ef67654d2a81ae3a63f92ddb8cd745525

    • SHA512

      6865ba771c8ebc450f04b3cad356af300ef84096e6fa250477c5c27660f849e19edbfea759254ad30a765853d9baae64229366f9565e9d8611e0984de0ea2b52

    • SSDEEP

      98304:14ejT3CES6b4yULYHO3rtF3OzszTSmxA0lfiJCttOBvlbkTCLCXeo:GwhWYTzszTSmVlfiJCttKvlbkdXeo

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks