General
-
Target
BoostrapperX64.exe
-
Size
1.1MB
-
Sample
250103-ql3c7syngm
-
MD5
7ceaf5f580f8c1de0abd2155e23fabd3
-
SHA1
23b87f5c240953a9f1cd3091db9dd15c3035526a
-
SHA256
5f48c49a076ce47c99701ffc6923f70f2e2992d4d8f250ee033f268feb1347be
-
SHA512
6ac89ab1be1e929783bf3561c6048185bf551599939c4e42e7a785a68b7aa3a4053313edb878a78d4af8e2efee0c2a33251f27a818e2edf369e8fdf3e1e6c6fa
-
SSDEEP
24576:HTaE1KGZIg8ji3ZvXwz1TkZ6eVRLw5dpVq2CBWIKPR6:zasKGCPMfg14/G5dDk8IKJ6
Static task
static1
Behavioral task
behavioral1
Sample
BoostrapperX64.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
BoostrapperX64.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://hummskitnj.buzz/api
https://cashfuzysao.buzz/api
https://appliacnesot.buzz/api
https://screwamusresz.buzz/api
https://inherineau.buzz/api
https://scentniej.buzz/api
https://rebuildeso.buzz/api
https://prisonyfork.buzz/api
https://begguinnerz.biz/api
Extracted
lumma
https://begguinnerz.biz/api
Targets
-
-
Target
BoostrapperX64.exe
-
Size
1.1MB
-
MD5
7ceaf5f580f8c1de0abd2155e23fabd3
-
SHA1
23b87f5c240953a9f1cd3091db9dd15c3035526a
-
SHA256
5f48c49a076ce47c99701ffc6923f70f2e2992d4d8f250ee033f268feb1347be
-
SHA512
6ac89ab1be1e929783bf3561c6048185bf551599939c4e42e7a785a68b7aa3a4053313edb878a78d4af8e2efee0c2a33251f27a818e2edf369e8fdf3e1e6c6fa
-
SSDEEP
24576:HTaE1KGZIg8ji3ZvXwz1TkZ6eVRLw5dpVq2CBWIKPR6:zasKGCPMfg14/G5dDk8IKJ6
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-