General

  • Target

    Bootstrapper-v2.exe

  • Size

    250.0MB

  • Sample

    250129-bfz9bswmfz

  • MD5

    5ddc96131a4fa050ed3c6e04f67ddae7

  • SHA1

    82ded800588cfbeb33fe6695959aff66dd1edcdd

  • SHA256

    078898cf626e80ac8dfa8e11f62731d0da3557691cbd8ce4bf27bcaf71f36e45

  • SHA512

    570c1a3fcd0dcdc4c8241d5f7dab781a6b7acefba2e921b58a7a53a33d9e8fa613ce74c1c515f2604aec062f101e649e498f2cef0b3ff9c5b203b1c39d823e52

  • SSDEEP

    24576:SGNzMuKIRynzVp0bPWcrusxT0h1fXMnd+mKpUj:VM+ED0b+6uqTOXMnd+Rpg

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://toppyneedus.biz/api

Targets

    • Target

      Bootstrapper-v2.exe

    • Size

      250.0MB

    • MD5

      5ddc96131a4fa050ed3c6e04f67ddae7

    • SHA1

      82ded800588cfbeb33fe6695959aff66dd1edcdd

    • SHA256

      078898cf626e80ac8dfa8e11f62731d0da3557691cbd8ce4bf27bcaf71f36e45

    • SHA512

      570c1a3fcd0dcdc4c8241d5f7dab781a6b7acefba2e921b58a7a53a33d9e8fa613ce74c1c515f2604aec062f101e649e498f2cef0b3ff9c5b203b1c39d823e52

    • SSDEEP

      24576:SGNzMuKIRynzVp0bPWcrusxT0h1fXMnd+mKpUj:VM+ED0b+6uqTOXMnd+Rpg

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks