Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add 87.120.115.240 - lumma stealer - malware #726

Merged
merged 5 commits into from
Jan 27, 2025
Merged

Add 87.120.115.240 - lumma stealer - malware #726

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
1a20c39
add 87.120.115.240 to IP blocklists - lummastealer
g0d33p3rsec Jan 27, 2025
8f98aaf
add URI to .lnk file hosted at 87.120.115.240 - lummastealer
g0d33p3rsec Jan 27, 2025
27803e0
add 80.76.51.231 to IP blocklists - second stage and payload - lummas…
g0d33p3rsec Jan 27, 2025
ee9f3ea
add URIs to second stage and final payload files hosted at 80.76.51.2…
g0d33p3rsec Jan 27, 2025
1256043
add C2 domains for lummastealer to wildcard list - malware
g0d33p3rsec Jan 27, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions IP-addr.cidr.in-addr.arpa
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -72,10 +72,12 @@
32.223.85.215.91
32.224.120.251.47
32.231.139.205.154
32.231.51.76.80
32.236.187.106.170
32.236.194.253.47
32.24.72.51.49
32.24.93.153.43
32.240.115.120.87
32.243.242.51.49
32.246.146.159.43
32.248.156.141.45
Expand Down
2 changes: 2 additions & 0 deletions IP-addr.cidr.list
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -115,8 +115,10 @@
8.221.101.91
8.221.106.55/32
8.221.127.62/32
80.76.51.231/32
81.83.84.22/32
83.222.191.91/32
87.120.115.240/32
87.120.125.47/32
91.188.254.21/32
91.215.85.223/32
Expand Down
2 changes: 2 additions & 0 deletions IP-addr.in-addr.arpa
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,11 +70,13 @@
220.199.106.170
224.120.251.47
231.139.205.154
231.51.76.80
235.139.34.188
236.187.106.170
236.194.253.47
24.72.51.49
24.93.153.43
240.115.120.87
243.242.51.49
248.156.141.45
249.228.253.47
Expand Down
2 changes: 2 additions & 0 deletions IP-addr.list
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -114,8 +114,10 @@
8.221.101.91
8.221.106.55
8.221.127.62
80.76.51.231
81.83.84.22
83.222.191.91
87.120.115.240
87.120.125.47
91.188.254.21
91.215.85.223
Expand Down
3 changes: 3 additions & 0 deletions add-link
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,7 @@ http://83.222.191.91:8080/oops/loki.upx
http://83.222.191.91:8080/oops/loki.x86
http://83.222.191.91:8080/oops/loki.x86_64
http://83.222.191.91:8080/oops/tftp.sh
http://87.120.115.240/Downloads/tg.-frumos-hcl-nr.-75-1.pdf.lnk
http://94.156.167.30/Agent381.msi
http://94.156.167.30/Agent381.zip
http://94.156.167.30/Desktop.img
Expand Down Expand Up @@ -1781,6 +1782,8 @@ https://2m.ma/ar/
https://30-09-vjer09tg-ej5rg-9jker-gk0e-trgjk-r90jg-0rejg-9rr.obs.ap-southeast-3.myhuaweicloud.com/uy046uy-hgh5ejt-ghew-rhvgb-ewbnhrgv-0er5g-0bnhewr-g0r.html?AWSAccessKeyId=Y33AQWKH1XTGWG0XAF5T&Expires=1664482499&Signature=tyelPWJ3cU86NCoVhF38c12fIlo%3D
https://61f0r.r.ah.d.sendibm4.com/mk/cl/f/P4c6noeIW31hDASG9uhJPK1qjzYrNXTcbnOstxUYKsIbiLznkLiPZBx9NrkbmmHSlK-yL25tLbHqPxu5gjciHqr10x8IJ_ciLkEO2CEwa_p4haEWnnFmQvzDDFqtk-EL-Qlb49d7koD9-1yLWv9WAx-DbdT6T4t7f0Az8SuK4nkJd-MdRg
https://7i.se/debitreview
https://80.76.51.231/Kompass-4.1.2.exe
https://80.76.51.231/Samarik
https://_helps_ledgercom_us_en.teachable.com/
https://_helps_ledgercom_us_en.teachable.com/p/home
https://aarif.co/g/nedbank/up/ab/ban/Login/
Expand Down
10 changes: 10 additions & 0 deletions add-wildcard-domain
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,5 @@
123pan.cn
3xp3cts1aim.sbs
404024.xyz
abbotsleigh.nsw.edu.au
abcmueblesbogota.com
Expand Down Expand Up @@ -27,6 +28,7 @@ badhabits.ug
balneariodelugo.com
beastlucyspin.click
beastsrandompack.click
befall-sm0ker.sbs
benyex.cl
bersowir.org
besatsrandompacks.click
Expand Down Expand Up @@ -2445,6 +2447,7 @@ kusjxka.xyz
lastimaners.ug
lebomashilo.co.za
leopolfa.shop
librari-night.sbs
lieferdienste-deutsche.com
liferacer.shop
linkedinin.com
Expand Down Expand Up @@ -2498,20 +2501,25 @@ osapol.net
ostarcub.xyz
otwareng.xyz
ountab.com
owner-vacat10n.sbs
p.usertrackktc.top
p10tgrace.sbs
p3ar11fter.sbs
packtrack-help.top
paipaisdvzxc.ru
papychat-quete.site
parceltrack-help.top
partaususd.ru
pastratas.ac.ug
peepburry828.sbs
pejusing.xyz
pescacancun.com
phsw.site
playwell.ug
portalunimedcrs.com.br
premium-acc-payment.com
probacons.com
processhol.sbs
puroligert.com
qd34gf23ewrfsd1233.ru
quatro-casino.ca
Expand Down Expand Up @@ -2541,6 +2549,7 @@ simplylovingproducts.com
sitefind.top
skimswanp.com
sldkhfw.xyz
smiteattacekr.org
sosvirus.net
southerninsurs.com
squad.cl
Expand Down Expand Up @@ -2672,6 +2681,7 @@ trackvpw.top
trackvpy.top
triathlethe.ug
tricazo.com
tripeggyun.fun
tuskslacx.ug
u.infotracktou.top
ucnlkw.cyou
Expand Down
Loading