Lumma Stealer - Indicators of Compromise
Last updated: 2026-05-24
C2 Domains (200)
pantofr.cyou brownhc.cyou diospfj.cyou bahaisda.cyou brakyfaw.cyou privahtc.cyou fourdigs.cyou straigxo.cyou honceybl.cyou carytui.vu mexzicaj.cyou genxetia.cyou heavywbp.cyou pomflgf.vu milnleny.cyou balvlqts.cyou trotskxt.cyou boletukk.cyou psychozc.cyou springvc.cyou strainug.cyou pricelou.cyou bactergy.cyou lyingapy.cyou americoq.cyou perfecpl.cyou granddsd.cyou amphibgz.cyou oncolonb.cyou lovesozp.cyou mushxhb.best genugsq.best modedapk.net rentuas.icu mpla-clo.cc cloback.icu purplefeetwines.monster jugbphm.click peafamqe.cyou afejoed.cyou coneogz.cyou brorgma.cyou analipr.cyou famiszp.cyou driplin.cyou genuoei.cyou elgccyx.cyou leypuuq.cyou thuqxer.cyou plitofa.cyou obnusho.cyou vidtihe.cyou tramoqj.cyou longmbx.click decrnoj.club strikql.shop tangmwp.club ulmudhw.shop gooseg.cyou cucumb.cyou codbsd.cyou attrakc.cyou opsonm.cyou hidatt.cyou affimcm.cyou botcywv.cyou deternx.cyou brechfo.cyou crapuhn.cyou cynipsq.cyou henofrl.cyou ditabop.cyou wrinkky.cyou mastojh.cyou knowale.cyou worldkt.cyou polecy.cyou ionicj.cyou tactip.cyou pashtu.cyou shootr.cyou navalc.cyou hexesq.cyou poxzxin.cyou blastikcn.com glassestacwop.shop commisionipwn.shop stitchmiscpaew.shop familbg.club atomiy.cyou cankgmr.cyou holypriest.gl test-dummy-validation-99999.com mexicwc.biz arresetrewwqo.shop certif.cyou smeltd.cyou lightef.cyou workltt.quest egyptnf.click genusne.click lumpeem.quest watchhr.biz thundut.biz brocaez.club mobbyyt.club notionz.qpon poochse.qpon blennia.qpon podiat.cyou pertur.cyou cerebe.cyou surprql.cyou slenjzj.cyou cheeerfulharbor.rest widdensmoywi.sbs idespeh.cyou greekcs.cyou brighterlib.click centegn.cyou blacken.cyou cavilee.cyou equilab.cyou genuscs.cyou shrewzh.cyou baggiup.cyou patrmpf.cyou florjxt.cyou yashnei.cyou skylips.cyou praiefb.cyou horsvyz.cyou combktt.cyou evetesttech.net equilmm.click victubp.cyou spotdvt.click mephizt.click flasrta.cyou gennods.cyou undighh.cyou arnicnm.click heuchvr.click japanel.cyou insuffh.cyou bleedminejw.buzz shitrba.click ossifvg.click silverhost.vg postoconel.com followw.cyou ironproe.live tt-pjipa.com murkena.cyou resolum.buzz intheme.cyou cyyounx.pics bobbysu.life noxajb.top dormynwj.buzz defaulemot.run deflamep.live sterpickced.digital orangemyther.live modelshiverd.icu garagedrootz.top fostinjec.today catterjur.run castlaby.live arisechairedd.shop begindecafer.world begguinnerz.biz underlinefiue.sbs pleasurenarrowsdla.shop falseaudiencekd.shop feighminoritsjda.shop marathonbeedksow.shop justifycanddidatewd.shop richardflorespoew.shop strwawrunnygjwu.shop raiseboltskdlwpow.shop reinforcenh.shop fragnantbui.shop offensivedzvju.shop gutterydhowi.shop vozmeatillu.shop drawzhotdog.shop stogeneratmns.shop ghostreedmnu.shop varianntyfeecterd.shop understanndtytonyguw.shop relaxtionflouwerwi.shop patternapplauderw.shop messtimetabledkolvk.shop horsedwollfedrwos.shop detailbaconroollyws.shop deprivedrinkyfaiir.shop considerrycurrentyws.shop superyupp.fun curtainjors.fun
C2 IP Addresses (5)
205.196.123.189 79.124.59.142 104.252.175.169 94.26.106.20 193.221.201.247
Malicious URLs (50)
https://baraltransportes.com/20khgc26oiwefoibfuww.php https://versaclean.com.br/wp-content/BocAvenue.exe http://185.76.243.96/itgf/qjgd.odd http://185.76.243.96/frlb.odg https://nexoramods.net/nexora.zip https://windefender.best/?campaignid=45628&groupid=130392846921&targetid=kwd-10005570 http://178.17.58.0x31/tujg.mkv https://185.102.115.69/48e.lim http://213.111.153.40/lf7n/ihbs.odd http://213.111.153.0x28/lf7n/ihbs.odd https://anondrop.net/1408852323941224540 https://anondrop.net/1408851068389163010 https://anondrop.net/1408850362915361032 http://88.99.145.13:444/?anondrop.net_scampage https://anondrop.net/1408850668046913618 https://anondrop.net/1408851906733805629 https://anondrop.net/1408851485831336028 https://streamcache.site/balc.jpg https://t0urist.cv/CrL.ini https://www.dropbox.com/t/7YKNV6Ccksm2FD3v https://download2329.mediafire.com/3002yurx4tpgfrBLM-UDFT16u8yZv6CVhIubNpMWpAe1kHlU-QuiPrlnHheh84nrhHbOLw8MrZK5K9n10pn1iPh1ekQU35MuqgNT4jwpkuRrcQgzO4-kYf41GwhkeEt4vnj9pTnqG4TGrTg7t3wwB7pfzivEquO1WiDr24uAQ6R4QQ/9mp872akp80s4ui/L4%D0%B0nchXPr%D0%BE_Win64_%5Bv3.1.1%5D_P%D0%BErtX_x64.zip https://download2334.mediafire.com/omztunjkjrwglwYHUdOb47TJdgZoEhdNvCsN5ooze0wRn6IVOd-DynniCuJNOhpjuXiimznygygNgOJtSA-n76tge2OCmFfEXpHT1e4fN3U2kBUkbp7alcd6nLSzeXOlNrSck8ECKhxEQkwohSAoukUiy8Y_hlEOjujQICsNH0wVjg/flpp764nam459g2/GalaxyPr00j33ct2.67v.zip https://mega.nz/file/K5RyiQ4L#Qv-iCXbW-PtH-wvnQq8gRHNj75H5CvxV1ssoBFBMxRQ http://185.156.72.196/ycl https://github.com/legendary99999/legend11/releases/download/legend1/legend1.exe https://github.com/legendary99999/rgsfdgsfg/releases/download/grdfvgvsfd/Faceit.TITAN.ver.4.562.exe https://github.com/legendary99999/rdfgsdgadfg/releases/download/fadbsgfbgasb/alex12312.exe https://github.com/legendary99999/legend2/releases/download/legend2/legend2.exe https://12.innospark.cloud/vpnmcg.txt https://pub-d4469a7a24f7423989c5026116ada945.r2.dev/vpncmgr.exe https://directxapps.shop/NILdR0uHd0xf2wKhJXsaGal67PZbxnPg https://undo.sg/file.exe https://www.dropbox.com/scl/fi/xfme3jj5rgt6u5ig7he70/CapCut-Pro.rar?rlkey=ndad0985or8n5rokxmb0pz5k0&st=wcorhwhg&dl=1 https://sites.google.com/view/robloxfree2025/roblox-free-hack https://drive.google.com/file/d/11SRBeq-5b2C7gf5Z24SzNiSxCTSHONLJ/view https://app.mediafire.com/nv3tqmek5l0sy https://github.com/Fortnite-Wallhacks-2025/.github/releases/tag/files https://github.com/RaquelG18/Luna-Executor/releases https://www.transfernow.net/dl/20250411w2aAKIJy?67f972e914fe6_67f972e914fe8&sdm=1a251d0c7deda496a1d5a90a395bcc4866d974b7 https://mega.nz/folder/SQ4BWbBB#fAN-0OThrJOUdQL-8mb7TA https://www.transfernow.net/en/bld?utm_source=20250407VJA0tBzl https://mega.nz/file/rFdUmQRR#Tt2_tJ3TBN_M0D_-KLrOZkuxU72Y_c_SpNpTde5ESMY/trmr/472c53960a4c2dccd5 https://www.mediafire.com/folder/1a2yiirfpq4zo/d https://www.mediafire.com/folder/pwsem69dw0f2v/Global%D0%A1h%D0%B5%D0%B0ts https://sites.google.com/view/drcheats6 https://github.com/AkhtarAriq/krnl-latest-update/releases/tag/2025 https://g3.uueui.shop/d1196e3e1b76ca8658b7d6b95ee5a559513873ea9cdb7bbf.bmp https://zetrax.shop/firsthookup.mp3 https://a.uueui.shop/700815a50547b01b29cf3a1ca55d7a7e3058e7d911072018.html https://h1.yyoiy.shop/750413b4e6897a671bc759e04597952a0be747830189873b.xlsm
Data Sources
MalwareBazaar (abuse.ch) • ThreatFox (abuse.ch) • URLhaus (abuse.ch)