← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
The Pumpkin Eclipse - Lumen
WHITE text_account 2024-06-02 Modified: 2024-07-02
93
IOCs
HIGH VOLUME
The Chalubo malware, first identified in 2018, was used in a destructive attack on a single internet service provider in October 2023, Lumen Technologies’ Black Lotus Labs has confirmed.
pathbuttonspanscriptlinktemplateheader dropdowniconbuttonproductsolutionsformfootermetacodeenterprisereloadclosechalubodownloadbodyfindwritestarcopyopenmaincontactoctoberchalubo malwareddosactionteclumenlua scriptlotus labssohonovemberblacknext
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Chalubo
Indicators of Compromise (2 / 93 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 d23dab9c57284b5457c991abe63b7cd4 MD5 of a8a2c2f82d542b0e05848d102e2f04239982b48ba7522a83dfc8b1308d7a8c12 2024-06-02
FileHash-MD5 28827aba3675e1a802bb7d8113701615 MD5 of f9db9632ffd7e3bd5b700025fa9278420de0778029fe2eedb6ea7b3d7b999ef6 2024-06-02
References (2)
↗ https://github.com/blacklotuslabs/IOCs/blob/main/Pumpkin_Eclipse_IOCs.txt ↗ https://blog.lumen.com/the-pumpkin-eclipse/