Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2025-01-07_8ca1871f59e12e4d8d7cae814956bf8c_frostygoop_poet-rat_snatch
-
Size
11.7MB
-
Sample
250107-nm1jwsyrdv
-
MD5
8ca1871f59e12e4d8d7cae814956bf8c
-
SHA1
6c33fc74658b1e8088d0037f279449e3560b86e5
-
SHA256
48f2f430f385e1311e55df44128f8a3ef67654d2a81ae3a63f92ddb8cd745525
-
SHA512
6865ba771c8ebc450f04b3cad356af300ef84096e6fa250477c5c27660f849e19edbfea759254ad30a765853d9baae64229366f9565e9d8611e0984de0ea2b52
-
SSDEEP
98304:14ejT3CES6b4yULYHO3rtF3OzszTSmxA0lfiJCttOBvlbkTCLCXeo:GwhWYTzszTSmVlfiJCttKvlbkdXeo
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-07_8ca1871f59e12e4d8d7cae814956bf8c_frostygoop_poet-rat_snatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
2025-01-07_8ca1871f59e12e4d8d7cae814956bf8c_frostygoop_poet-rat_snatch
-
Size
11.7MB
-
MD5
8ca1871f59e12e4d8d7cae814956bf8c
-
SHA1
6c33fc74658b1e8088d0037f279449e3560b86e5
-
SHA256
48f2f430f385e1311e55df44128f8a3ef67654d2a81ae3a63f92ddb8cd745525
-
SHA512
6865ba771c8ebc450f04b3cad356af300ef84096e6fa250477c5c27660f849e19edbfea759254ad30a765853d9baae64229366f9565e9d8611e0984de0ea2b52
-
SSDEEP
98304:14ejT3CES6b4yULYHO3rtF3OzszTSmxA0lfiJCttOBvlbkTCLCXeo:GwhWYTzszTSmVlfiJCttKvlbkdXeo
-
Lumma family
-
Suspicious use of SetThreadContext
-