Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Blox-Fruits-Script-Roblox.exe

  • Size

    399KB

  • Sample

    250122-cbt27asjc1

  • MD5

    8326264cfcff215611c9890e985b80e6

  • SHA1

    658550e697d9499db7821cbbbf59ffd39eb59053

  • SHA256

    d5b6cd18d84f4c8334b84745bc0603d7d7407aa7243ef945f8a3696c9d097f65

  • SHA512

    e41f407c851eb5744fad83b504d56d8c1445d382f40c975ce938121908f484c44bc181ff60383e56cb7eb70bf127b8166b170aa35b8d032cf040a0ceebd02e3f

  • SSDEEP

    12288:pQXNUkhnjDvP1wNiqMAYVgPinUzLnP6MOXJ:p5khnv8iRVgPz6fXJ

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

https://suggestyuoz.biz/api

Targets

    • Target

      Blox-Fruits-Script-Roblox.exe

    • Size

      399KB

    • MD5

      8326264cfcff215611c9890e985b80e6

    • SHA1

      658550e697d9499db7821cbbbf59ffd39eb59053

    • SHA256

      d5b6cd18d84f4c8334b84745bc0603d7d7407aa7243ef945f8a3696c9d097f65

    • SHA512

      e41f407c851eb5744fad83b504d56d8c1445d382f40c975ce938121908f484c44bc181ff60383e56cb7eb70bf127b8166b170aa35b8d032cf040a0ceebd02e3f

    • SSDEEP

      12288:pQXNUkhnjDvP1wNiqMAYVgPinUzLnP6MOXJ:p5khnv8iRVgPz6fXJ

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks