Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

DtlManualU...n].exe

windows7-x64

10

DtlManualU...n].exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DtlManualUpdate_[1MB]_[unsign].exe

  • Size

    1.5MB

  • Sample

    250122-sd5vga1ra1

  • MD5

    9ea2e372a0f59313a7764968b960885a

  • SHA1

    bc827d3df1199187f3ce2de6798294938ce85629

  • SHA256

    9b54074129a734b3dfbbf6f746de30eaf021aa9e0b98cfb950257e02ecc1960e

  • SHA512

    f5af6cf2a9d9c55f3349ffb16af59b7e1b8e7da695646736922dabf43bc9480b17ecb5099a2f6585d9b794aa62ca0018bb41d538086cf694780a852df9564669

  • SSDEEP

    24576:RjHkbl3R4gXjElyx5VPM6D//N5FlxTy77YfE1vmu9Xh1p:RjEbdR4wjE8xH5T/NjqEu9X1

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://covvercilverow.shop/api

https://surroundeocw.shop/api

https://abortinoiwiam.shop/api

https://pumpkinkwquo.shop/api

https://priooozekw.shop/api

https://deallyharvenw.shop/api

https://defenddsouneuw.shop/api

https://racedsuitreow.shop/api

https://younngpresseo.shop/api

Targets

    • Target

      DtlManualUpdate_[1MB]_[unsign].exe

    • Size

      1.5MB

    • MD5

      9ea2e372a0f59313a7764968b960885a

    • SHA1

      bc827d3df1199187f3ce2de6798294938ce85629

    • SHA256

      9b54074129a734b3dfbbf6f746de30eaf021aa9e0b98cfb950257e02ecc1960e

    • SHA512

      f5af6cf2a9d9c55f3349ffb16af59b7e1b8e7da695646736922dabf43bc9480b17ecb5099a2f6585d9b794aa62ca0018bb41d538086cf694780a852df9564669

    • SSDEEP

      24576:RjHkbl3R4gXjElyx5VPM6D//N5FlxTy77YfE1vmu9Xh1p:RjEbdR4wjE8xH5T/NjqEu9X1

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks