Back to Business: Lumma Stealer Returns with Stealthier Methods ================================================================================================ SHA256 Detection Name 388f910e662f69c7ab6fcf5e938ba813cf92c7794e5c3a6ad29c2d9276921ed3 TrojanSpy.Win64.LUMMASTEALER.YXFGHZ 64f6c0c0fd736c4a82f545aadc7a1c49d4cea77b14f4b526ef9da56a606eeb3d TrojanSpy.Win32.LUMMASTEALER.YXFGAZ fa8be0ce6f177965a5cd2db80e57c49fb31083bd4ddcb052def24cfbf48d65b5 TROJ_FRS.VSNTGA25 (Lumma Stealer fake crack malware) ================================================================================================ Download URLs hxxps://github[.]com/ferrn1la/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone[.]exe hxxps://github[.]com/lesth1alds/FortniteSpoofer/raw/refs/heads/main/TempSpoofer[.]exe hxxps://github[.]com/svhcnenr/Temp-Spoofer-LifeTime/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/BayMushroomcow/Temp-Spoofer-LifeTime/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/Kitomofu/FortniteSpoofer/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/RAVV199/FortniteSpoofer/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/S0raEmptysky/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone[.]exe hxxp://github[.]com/caramm1t/Temp-Spoofer-LifeTime/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/carr1stomh/FortniteSpoofer/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/charsavve/Temp-Spoofer-LifeTime/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/classtneh1/Temp-Spoofer-LifeTime/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/emrillate/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone[.]exe hxxp://github[.]com/f1scow/FortniteSpoofer/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/ferrn1la/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone[.]exe hxxp://github[.]com/ggarl1os/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone[.]exe hxxp://github[.]com/h1ttmela/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone[.]exe hxxp://github[.]com/k0ntarrs/FortniteSpoofer/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/k1elen1hs/FortniteSpoofer/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/l1cmahnne/Temp-Spoofer-LifeTime/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/lesth1alds/FortniteSpoofer/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/nallerth1/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone[.]exe hxxp://github[.]com/r1mslicks/FortniteSpoofer/raw/refs/heads/main/TempSpoofer[.]exe hxxp://github[.]com/r1thessl1/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone[.]exe hxxps://raw[.]githubusercontent[.]com/am0slengh/SkriptGG/refs/heads/main/SkriptGG[.]exe hxxps://raw[.]githubusercontent[.]com/carr1stomh/FortniteSpoofer/edcf430af107ef18bcc3ed435791e1345a77031f/TempSpoofer[.]exe hxxps://raw[.]githubusercontent[.]com/ferrn1la/Monotone-HWID-Spoofer/5a6acd95d8e321faee3bd97511f3545f6e75f7fd/Monotone[.]exe hxxps://raw[.]githubusercontent[.]com/ggarl1os/Monotone-HWID-Spoofer/e326762359914743e5d9e3e8320e5be2182b1c0c/Monotone[.]exe hxxps://raw[.]githubusercontent[.]com/svhcnenr/Temp-Spoofer-LifeTime/1cb620ea7a2c0dfb9d3779f0b2732b2a877fbc1f/TempSpoofer[.]exe hxxps://raw[.]githubusercontent[.]com/wrett1h/Monotone-HWID-Spoofer/f445555717a928a5e029dbf87b7a002e3d03b4c3/Monotone[.]exe hxxp://raw[.]githubusercontent[.]com/spenddar1/Temp-Spoofer-LifeTime/refs/heads/main/TempSpoofer[.]exe hxxps://softwarescr[.]info/dl hxxps://ui3[.]fit/WeX[.]ini ================================================================================================ ClickFix URL hxxps://vfy2[.]help ================================================================================================ C&C URLs hxxp://cbakk[.]xyz/ajng hxxp://cexpxg[.]xyz/airq hxxp://citellcagt[.]top/gjtu hxxp://diecam[.]top/laur hxxp://dkkig[.]xyz/xjau hxxp://dzyzb[.]xyz/anby hxxp://escczlv[.]top/bufi hxxp://korxddl[.]top/qidz hxxp://lnofi[.]xyz/qoei hxxp://localixbiw[.]top/zlpa hxxp://lodib[.]xyz/towq hxxp://narrathfpt[.]top/tekq hxxp://nbcsfar[.]xyz/tpxz hxxp://plapwf[.]top/agnb hxxp://reckdp[.]pics/xiar hxxp://ryxpq[.]xyz/tpaz hxxp://sqgzl[.]xyz/taoa hxxp://stochalyqp[.]xyz/alfp hxxp://swenku[.]xyz/gaok hxxp://trsuv[.]xyz/gait hxxp://urarfx[.]xyz/twox hxxp://ycvduc[.]xyz/trie ================================================================================================ C&C Domains cbakk[.]xyz cexpxg[.]xyz fiuylj[.]top nbcsfar[.]xyz sqgzl[.]xyz trsuv[.]xyz urarfx[.]xyz ycvduc[.]xyz ================================================================================================