General

  • Target

    Bootstrapper_v2.14.zip

  • Size

    3.0MB

  • Sample

    250112-c9k7yavmap

  • MD5

    be50fd5439dd259ad974148a7e5fc476

  • SHA1

    6606b19c1924d7268d7ec1f4ac92b69d936c7f4b

  • SHA256

    45b076e626b88b37b18d4f10a3793cd1eccdf20000a026fc0def572dcbb587cf

  • SHA512

    6c128a6214b290d6d3d90f1f2bef68300e3fd21fe3afbcd80e71c2cdf11aecbbe273e0549b1cff57cba6f2d4c266398724a832299b62d929d3c91dce4c86e373

  • SSDEEP

    98304:u/fmdpMr203IcrW44Pd46Fgh1zw25JIwXybs:u/6pMr2I7Z6FgHw25JxD

Malware Config

Extracted

Family

lumma

C2

https://showpanicke.shop/api

Targets

    • Target

      Bootstrapper_v2.14.zip

    • Size

      3.0MB

    • MD5

      be50fd5439dd259ad974148a7e5fc476

    • SHA1

      6606b19c1924d7268d7ec1f4ac92b69d936c7f4b

    • SHA256

      45b076e626b88b37b18d4f10a3793cd1eccdf20000a026fc0def572dcbb587cf

    • SHA512

      6c128a6214b290d6d3d90f1f2bef68300e3fd21fe3afbcd80e71c2cdf11aecbbe273e0549b1cff57cba6f2d4c266398724a832299b62d929d3c91dce4c86e373

    • SSDEEP

      98304:u/fmdpMr203IcrW44Pd46Fgh1zw25JIwXybs:u/6pMr2I7Z6FgHw25JxD

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks