Overview

overview

10

Static

static

9

Bootstrapper-X64.zip

windows7-x64

1

Bootstrapper-X64.zip

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Bootstrapper-X64.zip

  • Size

    19.7MB

  • Sample

    250108-qryxzatpgm

  • MD5

    19c75e4dc3593e6c89412f1d20841c0b

  • SHA1

    1f12ac516be615c30d2190d3b432e73741e38f9e

  • SHA256

    5a9c5acd50bf5d967338980468c278976edabf05e6410e2ffa760907351843ed

  • SHA512

    aedaf33b0c2a1de214e46d7cc7e9b25d277721cfe4b452e486ea12bf04812013c824b8df7424cecf899690199e13fec79d4a4b21ed6ab4a242857e4fa265c7f5

  • SSDEEP

    393216:pV3pg94vh9mTYOryK5Sutvc6O5aCsnLYFRYXQ4XHCWDFkm51xgFM:pV3pg96h8hGFIQ5aCsnLYjyQkxxCM

Score
10/10
lummacryptonediscoverypackerstealer

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fastysticke.sbs/api

Extracted

Family

lumma

C2

https://fastysticke.sbs/api

Targets

    • Target

      Bootstrapper-X64.zip

    • Size

      19.7MB

    • MD5

      19c75e4dc3593e6c89412f1d20841c0b

    • SHA1

      1f12ac516be615c30d2190d3b432e73741e38f9e

    • SHA256

      5a9c5acd50bf5d967338980468c278976edabf05e6410e2ffa760907351843ed

    • SHA512

      aedaf33b0c2a1de214e46d7cc7e9b25d277721cfe4b452e486ea12bf04812013c824b8df7424cecf899690199e13fec79d4a4b21ed6ab4a242857e4fa265c7f5

    • SSDEEP

      393216:pV3pg94vh9mTYOryK5Sutvc6O5aCsnLYFRYXQ4XHCWDFkm51xgFM:pV3pg96h8hGFIQ5aCsnLYjyQkxxCM

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Lumma family

      lumma

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks