Lumma Stealer - Indicators of Compromise

Last updated: 2026-10-11

C2 Domains (200)

gemscocl.com
astroflowsystems.lol
94.26.83.69
ninjamysticblade.cfd
idealvgtrens.com
t.me
africeconc.digital
sensacoukwekch.com
inatehub.cyou
lunarise.bet
moonskyo.run
nucleji.my
www.thueringer-stuck.de
ntds.shop
cohesrc.cyou
passedt.cyou
claimsj.cyou
montgqd.cyou
familbi.cyou
feathqz.cyou
pitchgb.cyou
weekfoc.cyou
vipcloud-my.xyz
2flowers-my.xyz
winhttp.dll
solopodvip-my.xyz
gstatic-node.io
195.123.226.167
195.123.226.91
82.117.255.80
colomndead.xyz
costexcise.xyz
cloudsaled.xyz
polandgames.xyz
droppicches.xyz
hardsmi.cyou
genusim.cyou
frozetk.cyou
castrkq.cyou
razefti.cyou
seasoem.cyou
tangmwp.club
consuus.cyou
wilheah.cyou
diplokb.cyou
idealvs.cyou
answebi.cyou
pholith.cyou
clamsal.cyou
maenade.cyou
wifflvy.cyou
mistjlep.cyou
hustjonr.cyou
cudbweeo.cyou
pantofr.cyou
brownhc.cyou
diospfj.cyou
bahaisda.cyou
brakyfaw.cyou
privahtc.cyou
fourdigs.cyou
straigxo.cyou
honceybl.cyou
mexzicaj.cyou
carytui.vu
genxetia.cyou
heavywbp.cyou
pomflgf.vu
milnleny.cyou
balvlqts.cyou
trotskxt.cyou
boletukk.cyou
psychozc.cyou
springvc.cyou
strainug.cyou
pricelou.cyou
bactergy.cyou
lyingapy.cyou
americoq.cyou
afejoed.cyou
coneogz.cyou
analipr.cyou
famiszp.cyou
genuoei.cyou
elgccyx.cyou
leypuuq.cyou
thuqxer.cyou
obnusho.cyou
vidtihe.cyou
tramoqj.cyou
attrakc.cyou
affimcm.cyou
botcywv.cyou
deternx.cyou
brechfo.cyou
crapuhn.cyou
cynipsq.cyou
henofrl.cyou
ditabop.cyou
wrinkky.cyou
worldkt.cyou
atten-supporse.biz
setfupstore.icu
zinc-sneark.biz
se-blurry.biz
print-vexer.biz
impend-differ.biz
formy-spill.biz
dwell-exclaim.biz
dare-curbys.biz
covery-mover.biz
fitnescivilianquesw.pw
falsifydisappearsoaeka.pw
claimpassivedebatw.pw
coldcoercekowja.fun
taretool.pw
perfecpl.cyou
granddsd.cyou
amphibgz.cyou
oncolonb.cyou
lovesozp.cyou
mushxhb.best
genugsq.best
modedapk.net
purplefeetwines.monster
jugbphm.click
peafamqe.cyou
brorgma.cyou
driplin.cyou
plitofa.cyou
longmbx.click
ulmudhw.shop
strikql.shop
decrnoj.club
evetesttech.net
oculusr.cyou
chuckyr.cyou
unchewq.cyou
whitepepper.su
izzardtow.su
homuncloud.su
heavylussy.su
gooseg.cyou
cucumb.cyou
codbsd.cyou
opsonm.cyou
hidatt.cyou
mastojh.cyou
knowale.cyou
rentuas.icu
mpla-clo.cc
cloback.icu
polecy.cyou
ionicj.cyou
tactip.cyou
pashtu.cyou
shootr.cyou
navalc.cyou
hexesq.cyou
poxzxin.cyou
blastikcn.com
glassestacwop.shop
commisionipwn.shop
stitchmiscpaew.shop
familbg.club
atomiy.cyou
cankgmr.cyou
holypriest.gl
test-dummy-validation-99999.com
mexicwc.biz
arresetrewwqo.shop
certif.cyou
smeltd.cyou
lightef.cyou
workltt.quest
egyptnf.click
genusne.click
lumpeem.quest
watchhr.biz
thundut.biz
brocaez.club
mobbyyt.club
notionz.qpon
poochse.qpon
blennia.qpon
podiat.cyou
pertur.cyou
cerebe.cyou
surprql.cyou
slenjzj.cyou
cheeerfulharbor.rest
widdensmoywi.sbs
idespeh.cyou
greekcs.cyou
brighterlib.click
centegn.cyou
blacken.cyou
cavilee.cyou
equilab.cyou
genuscs.cyou

C2 IP Addresses (9)

94.26.83.69
5.181.181.26
88.198.29.97
91.228.52.43
205.196.123.189
79.124.59.142
104.252.175.169
94.26.106.20
193.221.201.247

Malicious URLs (56)

http://153.80.242.239/b1/enix.r
http://nitrogateway.digital/xawk.r
http://153.80.242.239/xawk.r
http://nitrogateway.digital/b1/enix.r
http://nitrogateway.digital/vzuk.ocx
http://153.80.242.239/vzuk.ocx
https://baraltransportes.com/20khgc26oiwefoibfuww.php
https://versaclean.com.br/wp-content/BocAvenue.exe
http://185.76.243.96/itgf/qjgd.odd
http://185.76.243.96/frlb.odg
https://nexoramods.net/nexora.zip
https://windefender.best/?campaignid=45628&groupid=130392846921&targetid=kwd-10005570
http://178.17.58.0x31/tujg.mkv
https://185.102.115.69/48e.lim
http://213.111.153.40/lf7n/ihbs.odd
http://213.111.153.0x28/lf7n/ihbs.odd
https://anondrop.net/1408852323941224540
http://88.99.145.13:444/?anondrop.net_scampage
https://anondrop.net/1408850362915361032
https://anondrop.net/1408851068389163010
https://anondrop.net/1408850668046913618
https://anondrop.net/1408851485831336028
https://anondrop.net/1408851906733805629
https://streamcache.site/balc.jpg
https://t0urist.cv/CrL.ini
https://www.dropbox.com/t/7YKNV6Ccksm2FD3v
https://download2329.mediafire.com/3002yurx4tpgfrBLM-UDFT16u8yZv6CVhIubNpMWpAe1kHlU-QuiPrlnHheh84nrhHbOLw8MrZK5K9n10pn1iPh1ekQU35MuqgNT4jwpkuRrcQgzO4-kYf41GwhkeEt4vnj9pTnqG4TGrTg7t3wwB7pfzivEquO1WiDr24uAQ6R4QQ/9mp872akp80s4ui/L4%D0%B0nchXPr%D0%BE_Win64_%5Bv3.1.1%5D_P%D0%BErtX_x64.zip
https://download2334.mediafire.com/omztunjkjrwglwYHUdOb47TJdgZoEhdNvCsN5ooze0wRn6IVOd-DynniCuJNOhpjuXiimznygygNgOJtSA-n76tge2OCmFfEXpHT1e4fN3U2kBUkbp7alcd6nLSzeXOlNrSck8ECKhxEQkwohSAoukUiy8Y_hlEOjujQICsNH0wVjg/flpp764nam459g2/GalaxyPr00j33ct2.67v.zip
https://mega.nz/file/K5RyiQ4L#Qv-iCXbW-PtH-wvnQq8gRHNj75H5CvxV1ssoBFBMxRQ
http://185.156.72.196/ycl
https://github.com/legendary99999/legend11/releases/download/legend1/legend1.exe
https://github.com/legendary99999/rgsfdgsfg/releases/download/grdfvgvsfd/Faceit.TITAN.ver.4.562.exe
https://github.com/legendary99999/legend2/releases/download/legend2/legend2.exe
https://github.com/legendary99999/rdfgsdgadfg/releases/download/fadbsgfbgasb/alex12312.exe
https://12.innospark.cloud/vpnmcg.txt
https://pub-d4469a7a24f7423989c5026116ada945.r2.dev/vpncmgr.exe
https://directxapps.shop/NILdR0uHd0xf2wKhJXsaGal67PZbxnPg
https://undo.sg/file.exe
https://www.dropbox.com/scl/fi/xfme3jj5rgt6u5ig7he70/CapCut-Pro.rar?rlkey=ndad0985or8n5rokxmb0pz5k0&st=wcorhwhg&dl=1
https://sites.google.com/view/robloxfree2025/roblox-free-hack
https://drive.google.com/file/d/11SRBeq-5b2C7gf5Z24SzNiSxCTSHONLJ/view
https://github.com/RaquelG18/Luna-Executor/releases
https://app.mediafire.com/nv3tqmek5l0sy
https://github.com/Fortnite-Wallhacks-2025/.github/releases/tag/files
https://github.com/AkhtarAriq/krnl-latest-update/releases/tag/2025
https://sites.google.com/view/drcheats6
https://www.mediafire.com/folder/pwsem69dw0f2v/Global%D0%A1h%D0%B5%D0%B0ts
https://www.mediafire.com/folder/1a2yiirfpq4zo/d
https://mega.nz/file/rFdUmQRR#Tt2_tJ3TBN_M0D_-KLrOZkuxU72Y_c_SpNpTde5ESMY/trmr/472c53960a4c2dccd5
https://www.transfernow.net/en/bld?utm_source=20250407VJA0tBzl
https://www.transfernow.net/dl/20250411w2aAKIJy?67f972e914fe6_67f972e914fe8&sdm=1a251d0c7deda496a1d5a90a395bcc4866d974b7
https://mega.nz/folder/SQ4BWbBB#fAN-0OThrJOUdQL-8mb7TA
https://g3.uueui.shop/d1196e3e1b76ca8658b7d6b95ee5a559513873ea9cdb7bbf.bmp
https://zetrax.shop/firsthookup.mp3
https://a.uueui.shop/700815a50547b01b29cf3a1ca55d7a7e3058e7d911072018.html
https://h1.yyoiy.shop/750413b4e6897a671bc759e04597952a0be747830189873b.xlsm

Data Sources

MalwareBazaar (abuse.ch) • ThreatFox (abuse.ch) • URLhaus (abuse.ch)