General

  • Target

    BootstrapperV2.exe

  • Size

    150.0MB

  • Sample

    250113-d3f53stmex

  • MD5

    ff9ecb042a95c9076b683c69d9d0310e

  • SHA1

    07c9486bd6424dedcac4e16e5d10ecee69be1c9a

  • SHA256

    572ab5e1c62b3fbc5bc0b5e7886a101beb89c5a4d074ee6d1c4bc037bdb5cf73

  • SHA512

    d1bb1961698e6ae5070254270204c28ac99dfcc987eb295c9368fccbf9f62c014cb8e3194c35469161fd4bd73b642bbe8ff7598f149702325b89c1fb1d4acb91

  • SSDEEP

    24576:fcpoY4ocmpX9j2UlWW915b8/cIAwVX+o5U+tITb71b7j:JY0sX9j2UAOjIEIAwN0+tS

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://jubbenjusk.biz/api

Targets

    • Target

      BootstrapperV2.exe

    • Size

      150.0MB

    • MD5

      ff9ecb042a95c9076b683c69d9d0310e

    • SHA1

      07c9486bd6424dedcac4e16e5d10ecee69be1c9a

    • SHA256

      572ab5e1c62b3fbc5bc0b5e7886a101beb89c5a4d074ee6d1c4bc037bdb5cf73

    • SHA512

      d1bb1961698e6ae5070254270204c28ac99dfcc987eb295c9368fccbf9f62c014cb8e3194c35469161fd4bd73b642bbe8ff7598f149702325b89c1fb1d4acb91

    • SSDEEP

      24576:fcpoY4ocmpX9j2UlWW915b8/cIAwVX+o5U+tITb71b7j:JY0sX9j2UAOjIEIAwN0+tS

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks