Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Blox-Fruits-Script-Roblox.exe
-
Size
399KB
-
Sample
250122-cbt27asjc1
-
MD5
8326264cfcff215611c9890e985b80e6
-
SHA1
658550e697d9499db7821cbbbf59ffd39eb59053
-
SHA256
d5b6cd18d84f4c8334b84745bc0603d7d7407aa7243ef945f8a3696c9d097f65
-
SHA512
e41f407c851eb5744fad83b504d56d8c1445d382f40c975ce938121908f484c44bc181ff60383e56cb7eb70bf127b8166b170aa35b8d032cf040a0ceebd02e3f
-
SSDEEP
12288:pQXNUkhnjDvP1wNiqMAYVgPinUzLnP6MOXJ:p5khnv8iRVgPz6fXJ
Static task
static1
Behavioral task
behavioral1
Sample
Blox-Fruits-Script-Roblox.exe
Resource
win7-20240729-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
https://suggestyuoz.biz/api
Targets
-
-
Target
Blox-Fruits-Script-Roblox.exe
-
Size
399KB
-
MD5
8326264cfcff215611c9890e985b80e6
-
SHA1
658550e697d9499db7821cbbbf59ffd39eb59053
-
SHA256
d5b6cd18d84f4c8334b84745bc0603d7d7407aa7243ef945f8a3696c9d097f65
-
SHA512
e41f407c851eb5744fad83b504d56d8c1445d382f40c975ce938121908f484c44bc181ff60383e56cb7eb70bf127b8166b170aa35b8d032cf040a0ceebd02e3f
-
SSDEEP
12288:pQXNUkhnjDvP1wNiqMAYVgPinUzLnP6MOXJ:p5khnv8iRVgPz6fXJ
-
Lumma family
-
Suspicious use of SetThreadContext
-