Skip to main content

Lumma Stealer

Malware Family

943 indicators of compromise attributed to Lumma Stealer across abuse.ch threat intelligence feeds.

Domains

406

IPs

8

URLs

404

Hashes

125

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
podiat.cyoudomain
nucleji.mydomain
killnnk.cyoudomain
lineduz.cyoudomain
strainug.cyoudomain
analipr.cyoudomain
wifflvy.cyoudomain
cheship.cyoudomain
exchank.cyoudomain
leypuuq.cyoudomain
programmbox.xyzdomain
insuffh.cyoudomain
feathqz.cyoudomain
shrewzh.cyoudomain
interti.cyoudomain
undighh.cyoudomain
boustrn.sudomain
prewjko.cyoudomain
mouseoiet.fundomain
cucumb.cyoudomain
205.196.123.189ip
104.252.175.169ip
94.26.106.20ip
193.221.201.247ip
5.181.181.26ip
88.198.29.97ip
91.228.52.43ip
94.26.83.69ip
https://falseaudiencekd.shop/apiurl
https://jawdedmirror.run/ewqdurl
https://remembkreom.xyz/apiurl
https://africeconc.digital/pkasurl
https://slam-whipp.sbs/apiurl
https://cerebe.cyouurl
https://kickykiduz.lat/apiurl
https://drawwyobstacw.sbs/apiurl
https://drawzhotdog.shop/apiurl
https://familbg.club/helpurl
https://partyyeisdo.shop/apiurl
https://honceybl.cyouurl
https://rabidcowse.shop/apiurl
https://crisiwarny.store/apiurl
https://tt-pjipa.com/apiurl
https://amphibgz.cyouurl
https://advennture.top/GKsiiourl
https://pantofr.cyouurl
https://galaxiay.world/GLnajiurl
http://flowers-my.xyz/c2sockurl
6270f38bdf27aebb108331a484220a8bc0b9a1e6a2c4bba6dad89a2f3665bca5hash
9ee58eb59e337c06429ff3f0afd0ee6886b0644ddd4531305b269e97ad2b8d42hash
c52613e3099f1cef0cd3bcdf1732504e56300c127fe150816bb30c845eeea620hash
c3269a1d5644effdf2071a8437d4def5644074bcac0b73715ca891f6b10f5274hash
a11be4c1d76dcc1e94d5b6e9d068e763e0f0da66714fc04a8465171dd25048f8hash
9eddc13417679ef715743574858a0010f1017eef771b24756e99e2ea0ce8b893hash
9b1fad1eb049d54f44103ba67be774b96d2cfd82eeb5ec72aadd20ec29d846f8hash
92475d4a09d19b74ab16a851b6d4a7e460040089e49c953d3eae3e460e26ef24hash
e31f3dfd7a7b1be8dfcf0f75b6e8c4a0ccc5b16a1f51395526b258f67c076f05hash
ce3f6c84d6b68c669b0ed4d255d368260acfb286299e341de94ed689db6baf21hash
ec798a7883c65756c2d8c19fdd14a24353ab0584e2d7cf4920a798938272cc24hash
f2717c28e33f137ae01af445243f13e12357834fd9fdaf79a63ab74ecc28025dhash

Another file to check? Run a file hash reputation check.