← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
The Pumpkin Eclipse - Lumen
WHITE Tr1sa111 2024-06-25 Modified: 2024-07-04
76
IOCs
HIGH VOLUME
chalubochalubo malwareddosactionteclumenlua scriptlotus labssohoblackacidrain
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Chalubo
Indicators of Compromise (24 / 76 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL http://185.189.240.13:8080/E2XRIEGSOAPU3Z5Q8 — 2024-06-25
URL http://185.189.240.13:8080/E2XRIEGSOAPU3Z5Q8/res.dat — 2024-06-25
URL http://194.36.190.99:38291/as/crtarm3 — 2024-06-25
URL http://2.59.222.97/dldsc522dsdasd/res.dat — 2024-06-25
URL http://91.211.88.225:8080/SASBCKXOWYALLCZXF — 2024-06-25
URL http://91.211.88.6:8080/ASUHALUMNABTC — 2024-06-25
URL http://ammhdfgygb.com/dldsc522dsdasd/res.dat — 2024-06-25
URL http://coreconf.net:8080/E2XRIEGSOAPU3Z5Q8 — 2024-06-25
URL http://coreconf.net:8080/E2XRIEGSOAPU3Z5Q8/mips — 2024-06-25
URL http://nihiosuxnmo.com:8080/SASBCKXOWYALLCZXF — 2024-06-25
URL http://sainnguatc.com:8080/ASUHALUMNABTC b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793 2024-06-25
URL http://sainnguatc.com:8080/ASUHALUMNABTC/res.dat — 2024-06-25
URL http://secu100.com/23652xxxxx000008skcai/res.dat — 2024-06-25
URL http://xmsecu.io/00030674uucyttsikk/res.dat — 2024-06-25
URL http://xmsecu.io/00030678bbgstrjs/res.dat — 2024-06-25
URL http://xmsecu.io/c638020vkklkjjiu/res.dat — 2024-06-25
URL http://xmsecu.net/00030695mcksiqq/res.dat — 2024-06-25
URL http://xmsecu100.net/23652xxxxx000008skcai/res.dat — 2024-06-25
URL https://cu6s.com — 2024-06-25
URL https://dh.id3cqcmgjcb.top — 2024-06-25
URL https://m.aiguoba.com — 2024-06-25
URL https://m.isanyin.com — 2024-06-25
URL https://mh.55dmh.com — 2024-06-25
URL https://www.v5002.cn — 2024-06-25
References (1)
↗ https://blog.lumen.com/the-pumpkin-eclipse/