← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
LummaStealer
WHITE Sand-Storm 2025-01-24 Modified: 2025-01-24
1053
IOCs
HIGH VOLUME
subdomainsredditwetransfersignstrongiocsgithubfindsearchcode issuespullbreadcrumbsmalwarestarpowershellfooter
Indicators of Compromise (5 / 1053 total)
All hostname FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 197be8d53194ca2575049be1446a9363184b32c3 SHA1 of 3734e365ab10e73a85320916ba49c3ee 2025-01-24
FileHash-SHA1 58c4adc3d4a848ae10bc29cf97dc5a70efa4c939 SHA1 of a181e4f186f156cbb238984f8a5bf4e6 2025-01-24
FileHash-SHA1 5e66f117d81ebc27a0550dcb2981b8604f6bb2ba SHA1 of 380565ca4713bf766a6b7136f9d46382 2025-01-24
FileHash-SHA1 77d424ee2a9dce59f20e68769f1964b131c96922 SHA1 of b377795978c82087db0a0bcd69cdbfff 2025-01-24
FileHash-SHA1 afda370679781e600c25d1215c8c16c15caaeeac SHA1 of dd74b4fb6bc7807df71fd589fb25a2cc 2025-01-24
References (2)
↗ https://gist.githubusercontent.com/qbourgue/071c333ff5182f031da3ba55cc7da1ec/raw/ec4ba396c0d1052cc8b0a69c1bad1e0e5aef2ab6/malicious_domains_impersonating_reddit_wetransfer_selfau3_dropper_lumma_stealer_20012025.txt ↗ https://github.com/netskopeoss/NetskopeThreatLabsIOCs/tree/main/Malware/LummaStealer/IOCs