General

  • Target

    BoostrappersR[3.0.9].zip

  • Size

    54.9MB

  • Sample

    250107-cep8eaymax

  • MD5

    6a71b8a2581e4117d15bddca368e6ec9

  • SHA1

    43141c83c1d12ec7213d0274a7b8972ce16a17c7

  • SHA256

    2bbcd2220b0a71c8a7954f7021fd3a9f45a285f4da2ba19d827d4ef9935f60c1

  • SHA512

    5c49c34be5f63fee93b0b0ef1ee775e68b6b32c9b8a74c4420d290eb6bc374459e3ef844c846c0884dc14f4c45b44028762c4f8bebeecd5b3ee522ce58762c66

  • SSDEEP

    1572864:mfatNy95lOmui8ViWgWbv1QiyEWepWhfjZHcgRO:T/g+mn8ViW/m3B+gRO

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Targets

    • Target

      BoostrappersR[3.0.9].zip

    • Size

      54.9MB

    • MD5

      6a71b8a2581e4117d15bddca368e6ec9

    • SHA1

      43141c83c1d12ec7213d0274a7b8972ce16a17c7

    • SHA256

      2bbcd2220b0a71c8a7954f7021fd3a9f45a285f4da2ba19d827d4ef9935f60c1

    • SHA512

      5c49c34be5f63fee93b0b0ef1ee775e68b6b32c9b8a74c4420d290eb6bc374459e3ef844c846c0884dc14f4c45b44028762c4f8bebeecd5b3ee522ce58762c66

    • SSDEEP

      1572864:mfatNy95lOmui8ViWgWbv1QiyEWepWhfjZHcgRO:T/g+mn8ViW/m3B+gRO

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks