Lumma Stealer - Indicators of Compromise

Last updated: 2026-06-14

C2 Domains (200)

cohesrc.cyou
passedt.cyou
claimsj.cyou
feathqz.cyou
familbi.cyou
montgqd.cyou
pitchgb.cyou
weekfoc.cyou
vipcloud-my.xyz
2flowers-my.xyz
winhttp.dll
solopodvip-my.xyz
gstatic-node.io
195.123.226.167
195.123.226.91
82.117.255.80
colomndead.xyz
costexcise.xyz
polandgames.xyz
cloudsaled.xyz
droppicches.xyz
hardsmi.cyou
genusim.cyou
frozetk.cyou
castrkq.cyou
razefti.cyou
seasoem.cyou
tangmwp.club
consuus.cyou
diplokb.cyou
wilheah.cyou
idealvs.cyou
answebi.cyou
pholith.cyou
clamsal.cyou
maenade.cyou
wifflvy.cyou
mistjlep.cyou
cudbweeo.cyou
hustjonr.cyou
pantofr.cyou
brownhc.cyou
diospfj.cyou
bahaisda.cyou
brakyfaw.cyou
privahtc.cyou
fourdigs.cyou
straigxo.cyou
honceybl.cyou
carytui.vu
mexzicaj.cyou
genxetia.cyou
heavywbp.cyou
pomflgf.vu
milnleny.cyou
trotskxt.cyou
psychozc.cyou
strainug.cyou
pricelou.cyou
perfecpl.cyou
granddsd.cyou
oncolonb.cyou
lovesozp.cyou
jugbphm.click
afejoed.cyou
coneogz.cyou
analipr.cyou
famiszp.cyou
genuoei.cyou
elgccyx.cyou
leypuuq.cyou
thuqxer.cyou
obnusho.cyou
vidtihe.cyou
tramoqj.cyou
attrakc.cyou
affimcm.cyou
botcywv.cyou
deternx.cyou
brechfo.cyou
crapuhn.cyou
cynipsq.cyou
henofrl.cyou
ditabop.cyou
wrinkky.cyou
worldkt.cyou
ulmudhw.shop
strikql.shop
mushxhb.best
longmbx.click
genugsq.best
decrnoj.club
evetesttech.net
boletukk.cyou
springvc.cyou
bactergy.cyou
lyingapy.cyou
americoq.cyou
amphibgz.cyou
brorgma.cyou
driplin.cyou
plitofa.cyou
gooseg.cyou
cucumb.cyou
codbsd.cyou
opsonm.cyou
hidatt.cyou
mastojh.cyou
knowale.cyou
balvlqts.cyou
modedapk.net
rentuas.icu
mpla-clo.cc
cloback.icu
purplefeetwines.monster
peafamqe.cyou
polecy.cyou
ionicj.cyou
tactip.cyou
pashtu.cyou
shootr.cyou
navalc.cyou
hexesq.cyou
poxzxin.cyou
blastikcn.com
glassestacwop.shop
commisionipwn.shop
stitchmiscpaew.shop
familbg.club
atomiy.cyou
cankgmr.cyou
holypriest.gl
test-dummy-validation-99999.com
mexicwc.biz
arresetrewwqo.shop
certif.cyou
smeltd.cyou
lightef.cyou
workltt.quest
egyptnf.click
genusne.click
lumpeem.quest
watchhr.biz
thundut.biz
brocaez.club
mobbyyt.club
notionz.qpon
poochse.qpon
blennia.qpon
podiat.cyou
pertur.cyou
cerebe.cyou
surprql.cyou
slenjzj.cyou
cheeerfulharbor.rest
widdensmoywi.sbs
idespeh.cyou
greekcs.cyou
brighterlib.click
centegn.cyou
blacken.cyou
cavilee.cyou
equilab.cyou
genuscs.cyou
shrewzh.cyou
baggiup.cyou
patrmpf.cyou
florjxt.cyou
yashnei.cyou
skylips.cyou
praiefb.cyou
horsvyz.cyou
combktt.cyou
equilmm.click
victubp.cyou
spotdvt.click
mephizt.click
flasrta.cyou
gennods.cyou
undighh.cyou
arnicnm.click
heuchvr.click
japanel.cyou
insuffh.cyou
bleedminejw.buzz
shitrba.click
ossifvg.click
silverhost.vg
postoconel.com
followw.cyou
ironproe.live
tt-pjipa.com
murkena.cyou
resolum.buzz
intheme.cyou
cyyounx.pics
bobbysu.life
noxajb.top
dormynwj.buzz
defaulemot.run

C2 IP Addresses (5)

205.196.123.189
79.124.59.142
104.252.175.169
94.26.106.20
193.221.201.247

Malicious URLs (56)

http://153.80.242.239/b1/enix.r
http://nitrogateway.digital/xawk.r
http://153.80.242.239/vzuk.ocx
http://nitrogateway.digital/vzuk.ocx
http://nitrogateway.digital/b1/enix.r
http://153.80.242.239/xawk.r
https://baraltransportes.com/20khgc26oiwefoibfuww.php
https://versaclean.com.br/wp-content/BocAvenue.exe
http://185.76.243.96/itgf/qjgd.odd
http://185.76.243.96/frlb.odg
https://nexoramods.net/nexora.zip
https://windefender.best/?campaignid=45628&groupid=130392846921&targetid=kwd-10005570
http://178.17.58.0x31/tujg.mkv
https://185.102.115.69/48e.lim
http://213.111.153.40/lf7n/ihbs.odd
http://213.111.153.0x28/lf7n/ihbs.odd
https://anondrop.net/1408852323941224540
https://anondrop.net/1408851068389163010
https://anondrop.net/1408850362915361032
http://88.99.145.13:444/?anondrop.net_scampage
https://anondrop.net/1408850668046913618
https://anondrop.net/1408851906733805629
https://anondrop.net/1408851485831336028
https://streamcache.site/balc.jpg
https://t0urist.cv/CrL.ini
https://www.dropbox.com/t/7YKNV6Ccksm2FD3v
https://download2329.mediafire.com/3002yurx4tpgfrBLM-UDFT16u8yZv6CVhIubNpMWpAe1kHlU-QuiPrlnHheh84nrhHbOLw8MrZK5K9n10pn1iPh1ekQU35MuqgNT4jwpkuRrcQgzO4-kYf41GwhkeEt4vnj9pTnqG4TGrTg7t3wwB7pfzivEquO1WiDr24uAQ6R4QQ/9mp872akp80s4ui/L4%D0%B0nchXPr%D0%BE_Win64_%5Bv3.1.1%5D_P%D0%BErtX_x64.zip
https://download2334.mediafire.com/omztunjkjrwglwYHUdOb47TJdgZoEhdNvCsN5ooze0wRn6IVOd-DynniCuJNOhpjuXiimznygygNgOJtSA-n76tge2OCmFfEXpHT1e4fN3U2kBUkbp7alcd6nLSzeXOlNrSck8ECKhxEQkwohSAoukUiy8Y_hlEOjujQICsNH0wVjg/flpp764nam459g2/GalaxyPr00j33ct2.67v.zip
https://mega.nz/file/K5RyiQ4L#Qv-iCXbW-PtH-wvnQq8gRHNj75H5CvxV1ssoBFBMxRQ
http://185.156.72.196/ycl
https://github.com/legendary99999/legend11/releases/download/legend1/legend1.exe
https://github.com/legendary99999/rgsfdgsfg/releases/download/grdfvgvsfd/Faceit.TITAN.ver.4.562.exe
https://github.com/legendary99999/rdfgsdgadfg/releases/download/fadbsgfbgasb/alex12312.exe
https://github.com/legendary99999/legend2/releases/download/legend2/legend2.exe
https://12.innospark.cloud/vpnmcg.txt
https://pub-d4469a7a24f7423989c5026116ada945.r2.dev/vpncmgr.exe
https://directxapps.shop/NILdR0uHd0xf2wKhJXsaGal67PZbxnPg
https://undo.sg/file.exe
https://www.dropbox.com/scl/fi/xfme3jj5rgt6u5ig7he70/CapCut-Pro.rar?rlkey=ndad0985or8n5rokxmb0pz5k0&st=wcorhwhg&dl=1
https://sites.google.com/view/robloxfree2025/roblox-free-hack
https://drive.google.com/file/d/11SRBeq-5b2C7gf5Z24SzNiSxCTSHONLJ/view
https://app.mediafire.com/nv3tqmek5l0sy
https://github.com/Fortnite-Wallhacks-2025/.github/releases/tag/files
https://github.com/RaquelG18/Luna-Executor/releases
https://www.transfernow.net/dl/20250411w2aAKIJy?67f972e914fe6_67f972e914fe8&sdm=1a251d0c7deda496a1d5a90a395bcc4866d974b7
https://mega.nz/folder/SQ4BWbBB#fAN-0OThrJOUdQL-8mb7TA
https://www.transfernow.net/en/bld?utm_source=20250407VJA0tBzl
https://mega.nz/file/rFdUmQRR#Tt2_tJ3TBN_M0D_-KLrOZkuxU72Y_c_SpNpTde5ESMY/trmr/472c53960a4c2dccd5
https://www.mediafire.com/folder/1a2yiirfpq4zo/d
https://www.mediafire.com/folder/pwsem69dw0f2v/Global%D0%A1h%D0%B5%D0%B0ts
https://sites.google.com/view/drcheats6
https://github.com/AkhtarAriq/krnl-latest-update/releases/tag/2025
https://g3.uueui.shop/d1196e3e1b76ca8658b7d6b95ee5a559513873ea9cdb7bbf.bmp
https://zetrax.shop/firsthookup.mp3
https://a.uueui.shop/700815a50547b01b29cf3a1ca55d7a7e3058e7d911072018.html
https://h1.yyoiy.shop/750413b4e6897a671bc759e04597952a0be747830189873b.xlsm

Data Sources

MalwareBazaar (abuse.ch) ThreatFox (abuse.ch) URLhaus (abuse.ch)