← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
LummaStealer
WHITE Sand-Storm 2025-01-24 Modified: 2025-01-24
1053
IOCs
HIGH VOLUME
subdomainsredditwetransfersignstrongiocsgithubfindsearchcode issuespullbreadcrumbsmalwarestarpowershellfooter
Indicators of Compromise (28 / 1053 total)
All hostname FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
URL http://bestinthemarket.com/courses.html — 2025-01-24
URL http://celebrationshub.shop/continue-to-browse.html — 2025-01-24
URL http://crystaltreasures.shop/get-going-forward.html — 2025-01-24
URL http://cubesmatch.com/play.html — 2025-01-24
URL http://diamondrushed.com/play.html — 2025-01-24
URL http://dokedok.shop/pass-this-step-to-go-next-riii1n.html — 2025-01-24
URL http://edidos.shop/pass-this-step-to-go-further-riii1.html — 2025-01-24
URL http://espiano.shop/proceed-to-next-page-riii1.html — 2025-01-24
URL http://ghazaano.shop/Need-to-Pass-this-Stepv2.html — 2025-01-24
URL http://googlsearchings.cfd/you-have-to-pass-this-step-2.html — 2025-01-24
URL http://googlsearchings.online/you-have-to-pass-this-step-2.html — 2025-01-24
URL http://gustavu.shop/path0forwarding-stepv2.html — 2025-01-24
URL http://iconcart.shop/must-clear-this-check-rii.html — 2025-01-24
URL http://jazmina.shop/pass-this-step-to-go-next-riii2.html — 2025-01-24
URL http://joopshoop.shop/speedy-check-waitv111.html — 2025-01-24
URL http://kizmond.shop/myforwarding-path-gotov01.html — 2025-01-24
URL http://luxeorbit.shop/you-have-to-pass-this-step-2.html — 2025-01-24
URL http://milta.shop/next-page-proceeding-waitv1.html — 2025-01-24
URL http://norpor.shop/surfing-toward-next-pagev2.html — 2025-01-24
URL http://oliveroh.shop/pass-this-step-to-continue-s7.html — 2025-01-24
URL http://retrosome.shop/proceed-to-next-page-riii2.html — 2025-01-24
URL http://rezomof.shop/pass-this-step-to-continue-s7.html — 2025-01-24
URL http://royaltyfree.pics/have-to-pass-this-step.html — 2025-01-24
URL http://sharethewebs.cfd/must-clear-this-check.html — 2025-01-24
URL http://sharethewebs.click/must-clear-this-check.html — 2025-01-24
URL http://sharethewebs.click/you-have-to-pass-this-step-2.html — 2025-01-24
URL http://speedmastere.com/play.html — 2025-01-24
URL http://towercrash.com/play.html — 2025-01-24
References (2)
↗ https://gist.githubusercontent.com/qbourgue/071c333ff5182f031da3ba55cc7da1ec/raw/ec4ba396c0d1052cc8b0a69c1bad1e0e5aef2ab6/malicious_domains_impersonating_reddit_wetransfer_selfau3_dropper_lumma_stealer_20012025.txt ↗ https://github.com/netskopeoss/NetskopeThreatLabsIOCs/tree/main/Malware/LummaStealer/IOCs