General
-
Target
Bootstrapper-v2.exe
-
Size
250.0MB
-
Sample
250129-bfz9bswmfz
-
MD5
5ddc96131a4fa050ed3c6e04f67ddae7
-
SHA1
82ded800588cfbeb33fe6695959aff66dd1edcdd
-
SHA256
078898cf626e80ac8dfa8e11f62731d0da3557691cbd8ce4bf27bcaf71f36e45
-
SHA512
570c1a3fcd0dcdc4c8241d5f7dab781a6b7acefba2e921b58a7a53a33d9e8fa613ce74c1c515f2604aec062f101e649e498f2cef0b3ff9c5b203b1c39d823e52
-
SSDEEP
24576:SGNzMuKIRynzVp0bPWcrusxT0h1fXMnd+mKpUj:VM+ED0b+6uqTOXMnd+Rpg
Static task
static1
Behavioral task
behavioral1
Sample
Bootstrapper-v2.exe
Resource
win7-20240708-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
Bootstrapper-v2.exe
-
Size
250.0MB
-
MD5
5ddc96131a4fa050ed3c6e04f67ddae7
-
SHA1
82ded800588cfbeb33fe6695959aff66dd1edcdd
-
SHA256
078898cf626e80ac8dfa8e11f62731d0da3557691cbd8ce4bf27bcaf71f36e45
-
SHA512
570c1a3fcd0dcdc4c8241d5f7dab781a6b7acefba2e921b58a7a53a33d9e8fa613ce74c1c515f2604aec062f101e649e498f2cef0b3ff9c5b203b1c39d823e52
-
SSDEEP
24576:SGNzMuKIRynzVp0bPWcrusxT0h1fXMnd+mKpUj:VM+ED0b+6uqTOXMnd+Rpg
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-