Lumma Stealer - Indicators of Compromise
Last updated: 2026-10-11
C2 Domains (200)
gemscocl.com astroflowsystems.lol 94.26.83.69 ninjamysticblade.cfd idealvgtrens.com t.me africeconc.digital sensacoukwekch.com inatehub.cyou lunarise.bet moonskyo.run nucleji.my www.thueringer-stuck.de ntds.shop cohesrc.cyou passedt.cyou claimsj.cyou montgqd.cyou familbi.cyou feathqz.cyou pitchgb.cyou weekfoc.cyou vipcloud-my.xyz 2flowers-my.xyz winhttp.dll solopodvip-my.xyz gstatic-node.io 195.123.226.167 195.123.226.91 82.117.255.80 colomndead.xyz costexcise.xyz cloudsaled.xyz polandgames.xyz droppicches.xyz hardsmi.cyou genusim.cyou frozetk.cyou castrkq.cyou razefti.cyou seasoem.cyou tangmwp.club consuus.cyou wilheah.cyou diplokb.cyou idealvs.cyou answebi.cyou pholith.cyou clamsal.cyou maenade.cyou wifflvy.cyou mistjlep.cyou hustjonr.cyou cudbweeo.cyou pantofr.cyou brownhc.cyou diospfj.cyou bahaisda.cyou brakyfaw.cyou privahtc.cyou fourdigs.cyou straigxo.cyou honceybl.cyou mexzicaj.cyou carytui.vu genxetia.cyou heavywbp.cyou pomflgf.vu milnleny.cyou balvlqts.cyou trotskxt.cyou boletukk.cyou psychozc.cyou springvc.cyou strainug.cyou pricelou.cyou bactergy.cyou lyingapy.cyou americoq.cyou afejoed.cyou coneogz.cyou analipr.cyou famiszp.cyou genuoei.cyou elgccyx.cyou leypuuq.cyou thuqxer.cyou obnusho.cyou vidtihe.cyou tramoqj.cyou attrakc.cyou affimcm.cyou botcywv.cyou deternx.cyou brechfo.cyou crapuhn.cyou cynipsq.cyou henofrl.cyou ditabop.cyou wrinkky.cyou worldkt.cyou atten-supporse.biz setfupstore.icu zinc-sneark.biz se-blurry.biz print-vexer.biz impend-differ.biz formy-spill.biz dwell-exclaim.biz dare-curbys.biz covery-mover.biz fitnescivilianquesw.pw falsifydisappearsoaeka.pw claimpassivedebatw.pw coldcoercekowja.fun taretool.pw perfecpl.cyou granddsd.cyou amphibgz.cyou oncolonb.cyou lovesozp.cyou mushxhb.best genugsq.best modedapk.net purplefeetwines.monster jugbphm.click peafamqe.cyou brorgma.cyou driplin.cyou plitofa.cyou longmbx.click ulmudhw.shop strikql.shop decrnoj.club evetesttech.net oculusr.cyou chuckyr.cyou unchewq.cyou whitepepper.su izzardtow.su homuncloud.su heavylussy.su gooseg.cyou cucumb.cyou codbsd.cyou opsonm.cyou hidatt.cyou mastojh.cyou knowale.cyou rentuas.icu mpla-clo.cc cloback.icu polecy.cyou ionicj.cyou tactip.cyou pashtu.cyou shootr.cyou navalc.cyou hexesq.cyou poxzxin.cyou blastikcn.com glassestacwop.shop commisionipwn.shop stitchmiscpaew.shop familbg.club atomiy.cyou cankgmr.cyou holypriest.gl test-dummy-validation-99999.com mexicwc.biz arresetrewwqo.shop certif.cyou smeltd.cyou lightef.cyou workltt.quest egyptnf.click genusne.click lumpeem.quest watchhr.biz thundut.biz brocaez.club mobbyyt.club notionz.qpon poochse.qpon blennia.qpon podiat.cyou pertur.cyou cerebe.cyou surprql.cyou slenjzj.cyou cheeerfulharbor.rest widdensmoywi.sbs idespeh.cyou greekcs.cyou brighterlib.click centegn.cyou blacken.cyou cavilee.cyou equilab.cyou genuscs.cyou
C2 IP Addresses (9)
94.26.83.69 5.181.181.26 88.198.29.97 91.228.52.43 205.196.123.189 79.124.59.142 104.252.175.169 94.26.106.20 193.221.201.247
Malicious URLs (56)
http://153.80.242.239/b1/enix.r http://nitrogateway.digital/xawk.r http://153.80.242.239/xawk.r http://nitrogateway.digital/b1/enix.r http://nitrogateway.digital/vzuk.ocx http://153.80.242.239/vzuk.ocx https://baraltransportes.com/20khgc26oiwefoibfuww.php https://versaclean.com.br/wp-content/BocAvenue.exe http://185.76.243.96/itgf/qjgd.odd http://185.76.243.96/frlb.odg https://nexoramods.net/nexora.zip https://windefender.best/?campaignid=45628&groupid=130392846921&targetid=kwd-10005570 http://178.17.58.0x31/tujg.mkv https://185.102.115.69/48e.lim http://213.111.153.40/lf7n/ihbs.odd http://213.111.153.0x28/lf7n/ihbs.odd https://anondrop.net/1408852323941224540 http://88.99.145.13:444/?anondrop.net_scampage https://anondrop.net/1408850362915361032 https://anondrop.net/1408851068389163010 https://anondrop.net/1408850668046913618 https://anondrop.net/1408851485831336028 https://anondrop.net/1408851906733805629 https://streamcache.site/balc.jpg https://t0urist.cv/CrL.ini https://www.dropbox.com/t/7YKNV6Ccksm2FD3v https://download2329.mediafire.com/3002yurx4tpgfrBLM-UDFT16u8yZv6CVhIubNpMWpAe1kHlU-QuiPrlnHheh84nrhHbOLw8MrZK5K9n10pn1iPh1ekQU35MuqgNT4jwpkuRrcQgzO4-kYf41GwhkeEt4vnj9pTnqG4TGrTg7t3wwB7pfzivEquO1WiDr24uAQ6R4QQ/9mp872akp80s4ui/L4%D0%B0nchXPr%D0%BE_Win64_%5Bv3.1.1%5D_P%D0%BErtX_x64.zip https://download2334.mediafire.com/omztunjkjrwglwYHUdOb47TJdgZoEhdNvCsN5ooze0wRn6IVOd-DynniCuJNOhpjuXiimznygygNgOJtSA-n76tge2OCmFfEXpHT1e4fN3U2kBUkbp7alcd6nLSzeXOlNrSck8ECKhxEQkwohSAoukUiy8Y_hlEOjujQICsNH0wVjg/flpp764nam459g2/GalaxyPr00j33ct2.67v.zip https://mega.nz/file/K5RyiQ4L#Qv-iCXbW-PtH-wvnQq8gRHNj75H5CvxV1ssoBFBMxRQ http://185.156.72.196/ycl https://github.com/legendary99999/legend11/releases/download/legend1/legend1.exe https://github.com/legendary99999/rgsfdgsfg/releases/download/grdfvgvsfd/Faceit.TITAN.ver.4.562.exe https://github.com/legendary99999/legend2/releases/download/legend2/legend2.exe https://github.com/legendary99999/rdfgsdgadfg/releases/download/fadbsgfbgasb/alex12312.exe https://12.innospark.cloud/vpnmcg.txt https://pub-d4469a7a24f7423989c5026116ada945.r2.dev/vpncmgr.exe https://directxapps.shop/NILdR0uHd0xf2wKhJXsaGal67PZbxnPg https://undo.sg/file.exe https://www.dropbox.com/scl/fi/xfme3jj5rgt6u5ig7he70/CapCut-Pro.rar?rlkey=ndad0985or8n5rokxmb0pz5k0&st=wcorhwhg&dl=1 https://sites.google.com/view/robloxfree2025/roblox-free-hack https://drive.google.com/file/d/11SRBeq-5b2C7gf5Z24SzNiSxCTSHONLJ/view https://github.com/RaquelG18/Luna-Executor/releases https://app.mediafire.com/nv3tqmek5l0sy https://github.com/Fortnite-Wallhacks-2025/.github/releases/tag/files https://github.com/AkhtarAriq/krnl-latest-update/releases/tag/2025 https://sites.google.com/view/drcheats6 https://www.mediafire.com/folder/pwsem69dw0f2v/Global%D0%A1h%D0%B5%D0%B0ts https://www.mediafire.com/folder/1a2yiirfpq4zo/d https://mega.nz/file/rFdUmQRR#Tt2_tJ3TBN_M0D_-KLrOZkuxU72Y_c_SpNpTde5ESMY/trmr/472c53960a4c2dccd5 https://www.transfernow.net/en/bld?utm_source=20250407VJA0tBzl https://www.transfernow.net/dl/20250411w2aAKIJy?67f972e914fe6_67f972e914fe8&sdm=1a251d0c7deda496a1d5a90a395bcc4866d974b7 https://mega.nz/folder/SQ4BWbBB#fAN-0OThrJOUdQL-8mb7TA https://g3.uueui.shop/d1196e3e1b76ca8658b7d6b95ee5a559513873ea9cdb7bbf.bmp https://zetrax.shop/firsthookup.mp3 https://a.uueui.shop/700815a50547b01b29cf3a1ca55d7a7e3058e7d911072018.html https://h1.yyoiy.shop/750413b4e6897a671bc759e04597952a0be747830189873b.xlsm
Data Sources
MalwareBazaar (abuse.ch) • ThreatFox (abuse.ch) • URLhaus (abuse.ch)