{
  "name": "Unmasking The 64-bit Variant of the Infamous Lumma Stealer",
  "slug": "unmasking-the-64-bit-variant-of-the-infamous-lumma-stealer",
  "description": "Gen Threat Labs has identified Remus, a new 64-bit infostealer attributed to the Lumma Stealer family, emerging after Lumma's takedown and the doxxing of its alleged core members. First campaigns date back to February 2026, with the malware switching from Steam/Telegram dead drop resolvers to EtherHiding and employing new anti-analysis checks. Remus shares multiple characteristics with Lumma including identical string obfuscation techniques, AntiVM checks, direct syscall/sysenter handling, indirect control flow obfuscation, and a unique Application-Bound Encryption bypass. The analysis details test builds labeled Tenzor from September 2025, representing a transitional step between Lumma and Remus. While maintaining Lumma's stealing arsenal for browser passwords, cookies, and cryptocurrency, Remus introduces blockchain-based C2 resolution via EtherHiding, additional anti-sandbox checks targeting analysis tool DLLs, and enhanced device fingerprinting capabilities.",
  "published": "2026-04-08T09:16:36.683000+00:00",
  "created_at": "2026-04-08T11:01:57.466000+00:00",
  "modified_at": "2026-04-08T09:01:57+00:00",
  "created_at_opencti": "2026-04-08T11:01:57.466000+00:00",
  "author": "AlienVault",
  "confidence": 100,
  "report_types": [
    "threat-report"
  ],
  "labels": [
    "64-bit variant",
    "application-bound encryption bypass",
    "aurastealer",
    "blockchain c2",
    "etherhiding",
    "infostealer",
    "lumma stealer",
    "remus",
    "rhadamanthys",
    "tenzor",
    "voidstealer"
  ],
  "tags": [
    "2026-04-08",
    "64-bit variant",
    "application-bound encryption bypass",
    "aurastealer",
    "blockchain c2",
    "etherhiding",
    "infostealer",
    "lumma stealer",
    "remus",
    "rhadamanthys",
    "tenzor",
    "voidstealer"
  ],
  "related_entities": {
    "indicators": [
      {
        "id": "287d34fb-2628-4004-a293-d5c369d45350",
        "name": "http://chromap.biz:4219"
      },
      {
        "id": "272acbd6-6925-4597-bf0b-9ca147f0b82a",
        "name": "http://zadno.run:4219"
      },
      {
        "id": "09250bab-def1-40a4-8722-8b894b040a79",
        "name": "217.156.122.57"
      },
      {
        "id": "1efe2337-017e-4fb6-803f-43ae626276af",
        "name": "prickaz.biz"
      },
      {
        "id": "38726aa8-2997-4bce-9088-4800b98c81eb",
        "name": "8b6b238ffa6e411229c6754ba99f7b990c49edfb2c34068ce0ac5564824d71ad"
      },
      {
        "id": "8459f904-a916-4b88-90f3-a83936a3cbfe",
        "name": "http://nitroca.biz:6782"
      },
      {
        "id": "5acbe312-3424-4e8b-80c8-618d1b3ac665",
        "name": "http://remnane.biz:5692"
      },
      {
        "id": "58cedfc1-96ca-41d6-9e37-a13633f52abc",
        "name": "http://intem.lat:9592"
      },
      {
        "id": "9f5715c5-d5b0-4a5f-801d-15e874e90e48",
        "name": "http://interxo.biz:7481"
      },
      {
        "id": "212b7f57-fb42-4532-8399-106609153ccf",
        "name": "http://texakgi.cloud:3849"
      },
      {
        "id": "e60eb7bf-67d5-4f1b-b7bd-289f8e45cbc2",
        "name": "nobleckly.biz"
      },
      {
        "id": "4fa3727b-2b08-407a-b2ff-abe3099b5a7b",
        "name": "http://borscer.biz:9592"
      },
      {
        "id": "2fdb06c3-8a77-4a26-b5d6-b1dc12bdccf4",
        "name": "http://baxe.pics:48261"
      },
      {
        "id": "bdf96829-195f-4cfe-bbff-24d85c0c4146",
        "name": "http://backbou.biz:5902"
      },
      {
        "id": "4b4dc193-317f-4c00-b8fe-d614ef827e37",
        "name": "borscer.biz"
      },
      {
        "id": "8d889985-433b-443a-a39e-8234ed96e146",
        "name": "c3f7cea80dbafaa90a88b28a6dfb1227caaf5c2a29f0ce06bf663d6ed2cfc079"
      },
      {
        "id": "fecde214-7e59-4578-beca-eeef4f9ac118",
        "name": "8653d7158486aa10fc0078c3ca9318cd7ace05d4b3e6f3b1fb84ffb7a6a339ec"
      },
      {
        "id": "a963c978-8c4a-4eb8-9c63-530eff831599",
        "name": "0580ebf601989457f0708799b431fd4d9f5e59d98838282d72936099aa6636da"
      },
      {
        "id": "75fd70a7-7966-457c-b9e0-43b342affda2",
        "name": "http://chalx.live:5902"
      },
      {
        "id": "cce5284b-6325-406e-8b0a-cb67ed4188a0",
        "name": "45.151.106.110"
      },
      {
        "id": "eb744bbb-4639-4cee-9f16-fe4eefdfa138",
        "name": "http://lazzo.bet:3989"
      },
      {
        "id": "57cfb54a-4937-45d3-a429-f8c154aaf7d1",
        "name": "forestoaker.com"
      },
      {
        "id": "65765431-b5d1-453e-bd2f-49cee40818fe",
        "name": "http://drymoge.biz:4192"
      },
      {
        "id": "d8401a0c-bb7b-4529-b575-eb0aaab18a2b",
        "name": "adveryx.biz"
      },
      {
        "id": "b05a5f04-aef2-4b5a-af24-5700a33eed3e",
        "name": "http://adveryx.biz:6573"
      },
      {
        "id": "d407a5f4-6a27-49e0-bce0-5f882265cf39",
        "name": "002f714f93bed53f165129a820c2d5b72227f1cafac43be19e5e223ce219a5e1"
      },
      {
        "id": "15c1ba1b-bda4-4cac-8710-042adb1fc555",
        "name": "066c4ab954fc1270ee62c0d7c582c4c691e58e0ffef0c654bc204a46e440d16d"
      },
      {
        "id": "abf1b1e7-6453-46cb-87b0-1943ef2ef734",
        "name": "buccstanor.pics"
      },
      {
        "id": "c620e0f4-8b04-4cd7-92c1-98e4e9fe9f1d",
        "name": "siltsoh.biz"
      },
      {
        "id": "ef8eba79-4062-4e2e-aa30-ef1fb7721947",
        "name": "http://woodena.biz:7821"
      },
      {
        "id": "24a61297-3497-48ac-8c7a-0fb14ca06916",
        "name": "http://managew.biz:5902"
      },
      {
        "id": "99d6b2a2-fc42-4472-a191-e947d91b0fe9",
        "name": "http://ropea.top:28313"
      },
      {
        "id": "dec3c269-6ded-43e3-9715-73617f4cf737",
        "name": "chalx.live"
      },
      {
        "id": "53994537-c6c6-42f7-bb24-3658170eaba0",
        "name": "http://gluckcreek.online:48261"
      },
      {
        "id": "240f2a68-f476-4160-819e-06783970731f",
        "name": "http://krondez.com:28982"
      },
      {
        "id": "fa931ee3-2c00-424f-abe2-7a6365b1c0dd",
        "name": "interxo.biz"
      },
      {
        "id": "121195cd-8bf6-4172-a9d9-8d73a44c3ff4",
        "name": "ropea.top"
      },
      {
        "id": "6f4066b1-16e8-4c21-a440-ae37393d5d28",
        "name": "dbf6facd28406361a6a81417b3ff5eb272ccc8dcc58a36bd5335a253ae4bf036"
      },
      {
        "id": "fe0d5565-b0a0-4a5f-a1c7-1c6796440278",
        "name": "baxe.pics"
      },
      {
        "id": "cc04fa29-bcf2-4849-adb3-5f1036b9126d",
        "name": "0683f353cf3e101f721f1658e2a554ff7888ff9f2c32e23ceb3d23876864a264"
      },
      {
        "id": "4bfa90df-1433-4dc1-a674-0c9326e0118d",
        "name": "http://navelum.biz:3201"
      },
      {
        "id": "4f539211-f168-4fe2-ab12-3353c19ebb16",
        "name": "a4f111e5425690fcd384c62ecb5b57b0f645925572af3541748e01d810cd2b40"
      },
      {
        "id": "5b498030-b5c1-484a-98be-bf500dce083a",
        "name": "intem.lat"
      },
      {
        "id": "12f709cb-fcaa-4206-8019-b9e919738009",
        "name": "chromap.biz"
      },
      {
        "id": "95c237c9-6cf0-4725-aded-f9b937c5be93",
        "name": "b037fa1dd769891b538d9ca26131890c93e3458eec96c5354bdebe50d04a5b3d"
      },
      {
        "id": "1833ba49-765e-4d52-b5bd-1a49d6b85d30",
        "name": "navelum.biz"
      },
      {
        "id": "72e923a5-ed0f-44b6-8443-22543a0cd457",
        "name": "484e3ab5d425a97819f01dcc330e005dc444c51625bfdcd7ea9a3954018d1fc9"
      },
      {
        "id": "8e60cadb-b71d-4229-a108-bb122c950a80",
        "name": "http://prickaz.biz:2039"
      },
      {
        "id": "577700b5-efa3-4581-a274-03d20bb2bd9e",
        "name": "cab7855ccfca19a06eea76e0e170f592dcc95906ecfa5436f5a11947e04e63d5"
      },
      {
        "id": "14652e49-5d82-4701-b3ab-e7cf7120d205",
        "name": "http://forestoaker.com:6290"
      },
      {
        "id": "056d0632-f113-4636-9001-d0a1c52b06a4",
        "name": "remnane.biz"
      },
      {
        "id": "882cec1c-431b-4a5a-a488-feb68048f272",
        "name": "parky.pics"
      },
      {
        "id": "bbc76fc8-e7ea-4e16-bc8d-666168172e57",
        "name": "http://parky.pics:3989"
      },
      {
        "id": "5ba73700-6467-4472-ac83-a9e6d91df862",
        "name": "80.97.160.155"
      },
      {
        "id": "696a118a-0dd5-4855-ae2a-791317c6f6d7",
        "name": "0a8f734f10400f7ae8fef591147e78dab6350089683be84c1cb6c82113cb1319"
      },
      {
        "id": "c5356787-b0ed-47b3-88f2-7d5941a9a17d",
        "name": "25e74a76f2f3601abcb20fd743a7e3cf3befd5a3838c7501af5d87d293233809"
      },
      {
        "id": "f83af23a-90a2-4972-a480-29bdc4e47aac",
        "name": "http://josegza.biz:8521"
      },
      {
        "id": "56e52b05-d63c-454d-8131-63b420bc5c9d",
        "name": "86.107.168.103"
      },
      {
        "id": "1c7a70e9-f249-4eda-ac07-421ed7add999",
        "name": "nitroca.biz"
      },
      {
        "id": "e8d0a7f0-d729-454c-90c3-028106b1c824",
        "name": "padaz.pics"
      },
      {
        "id": "0e5ee92f-296d-4d66-89aa-061811c67935",
        "name": "http://coox.live:28313"
      },
      {
        "id": "b2bdcb07-8809-4b56-b7fe-137ab541d9ef",
        "name": "ab2e47720388fa201e242552f8d8b82363c6c52f6c63fa3fec9dce027cb12e77"
      },
      {
        "id": "ff5fc4c0-109a-45be-a6e7-54ab7f1ed4a0",
        "name": "krondez.com"
      },
      {
        "id": "40229505-4723-458e-9f43-431cf5ae261c",
        "name": "backbou.biz"
      },
      {
        "id": "087d39f7-2a96-4f0a-8291-bab212ac8646",
        "name": "managew.biz"
      },
      {
        "id": "7066367b-5364-4320-8053-77fcbf96f64d",
        "name": "http://siltsoh.biz:7481"
      },
      {
        "id": "bc8abebe-b9d9-41bb-9d45-36832b9fc6c8",
        "name": "http://buccstanor.pics:28313"
      },
      {
        "id": "f8e3912a-ee8e-49c4-89b8-c4e0dd4907f1",
        "name": "coox.live"
      },
      {
        "id": "776cae10-0b0e-4e1e-93d4-53455ccbe126",
        "name": "josegza.biz"
      },
      {
        "id": "0ac7a1b3-080e-4778-90e1-aad14f1ad1a2",
        "name": "http://outcrol.biz:4895"
      },
      {
        "id": "a062679e-a762-4049-b73c-d9e70647b5b0",
        "name": "outcrol.biz"
      },
      {
        "id": "dc9912f9-67fb-4303-8161-e2ad3e98feb5",
        "name": "cheekiez.biz"
      },
      {
        "id": "67ecf095-8b4a-4fc7-b5e6-3c3f1b6eb815",
        "name": "64db10e76b46be8db36e02993d36559bc3f86606c9ea955731872b716c8f0c69"
      },
      {
        "id": "4bbee5f9-db8f-4e54-a358-84d55cc6de9d",
        "name": "zadno.run"
      },
      {
        "id": "a526c088-5443-40ae-a3dd-bf55f4e4c686",
        "name": "drymoge.biz"
      },
      {
        "id": "89820056-aeb8-4716-bafd-38139b898ff3",
        "name": "217.156.122.75"
      },
      {
        "id": "a2bb65bd-65dd-460f-95db-c0e92d63ae3b",
        "name": "217.156.122.12"
      },
      {
        "id": "8b33fce5-6cdc-46da-b9a8-343e48732253",
        "name": "http://vinte.online:28313"
      },
      {
        "id": "19c99be8-d80a-4bdc-b32c-669fade5bf38",
        "name": "gluckcreek.online"
      },
      {
        "id": "f7a23436-8731-4932-b49e-476a4498111c",
        "name": "788b56e9be2f1dd6a977dce0265f293ab42d3e8ffb287ab584e169fbf115da1f"
      },
      {
        "id": "5e861c72-9e38-46c5-8e07-90071dcd5846",
        "name": "vinte.online"
      },
      {
        "id": "99bfd361-c614-418d-9770-391980e5f357",
        "name": "4428c3ffe2532f162f31d7573bbc1cca2299195421da3d8e8a3e535e9fc42b08"
      },
      {
        "id": "c518fb59-3db0-4831-9ef2-b5b6902c8970",
        "name": "texakgi.cloud"
      },
      {
        "id": "2673bac3-37a8-43ee-9901-8b8e3225a3e3",
        "name": "lazzo.bet"
      },
      {
        "id": "b08dd04e-9932-4f48-bce5-9a0b55ae2b01",
        "name": "woodena.biz"
      },
      {
        "id": "68f01c35-e4fd-4a58-9eba-f95288caa3a5",
        "name": "http://buccstanor.pics:48261"
      },
      {
        "id": "3754c4ce-6d0a-47a2-b5f7-729a518544f9",
        "name": "bc11d036fe59abb3915f736307c56d2fd43e8127e46c31f926eeda864f4d66dc"
      },
      {
        "id": "6fc9a796-ab9c-4af9-812a-cc8dc93e6b00",
        "name": "http://padaz.pics:4219"
      }
    ],
    "intrusion_sets": [
      {
        "id": "b9a7069d-7d9a-4ff6-8e06-7dc7e0bc6d80",
        "name": "Lumma Stealer",
        "slug": "lumma-stealer"
      }
    ],
    "attack_patterns": [
      {
        "id": "32817170-4c07-427e-b8a5-80a733ae2550",
        "name": "T1497"
      },
      {
        "id": "5c67e5d2-bc85-4ce0-822d-f2f5d3b0ae4e",
        "name": "T1185"
      },
      {
        "id": "c3af9fd7-d307-4df4-9220-cc627938fb85",
        "name": "T1055"
      },
      {
        "id": "a72ebeae-8e62-4039-8135-e9c611011fdc",
        "name": "T1573"
      },
      {
        "id": "b7ba0db0-7d4f-436f-8d5f-c431d690b048",
        "name": "T1555.003"
      },
      {
        "id": "c9ee9b30-ba84-4c24-95e9-e8242d42af3f",
        "name": "T1071.001"
      },
      {
        "id": "a72b6e11-a5d5-4f5a-8f0d-8861e90c34f7",
        "name": "T1555"
      },
      {
        "id": "60972cf6-e90b-4600-af3c-13c468391d9c",
        "name": "T1106"
      },
      {
        "id": "97d377d8-89c7-48f8-a79f-0f48bd60df74",
        "name": "T1005"
      },
      {
        "id": "3ef9ffa3-6685-41f3-899b-250f06979505",
        "name": "T1134.001"
      },
      {
        "id": "0c836307-129e-4ff7-a532-180c633cacba",
        "name": "T1027"
      },
      {
        "id": "0192fd78-09e3-4fe4-a9d3-38a7137e15fa",
        "name": "T1055.002"
      },
      {
        "id": "b7c6c1ad-f183-4128-8427-3891029c73dc",
        "name": "T1539"
      },
      {
        "id": "05ac27d4-58d0-44b2-a984-cd5aefd1f7f9",
        "name": "T1497.001"
      },
      {
        "id": "870bd958-53a3-4d25-9f23-00aa8bd6674d",
        "name": "T1102"
      },
      {
        "id": "dea4e00b-6e38-4223-a0f2-8a44e403019b",
        "name": "T1564.003"
      },
      {
        "id": "0156fcda-e385-4662-b388-086c3e16feec",
        "name": "T1140"
      },
      {
        "id": "e1b18ecf-d74e-4fe6-9bd4-ca6a62e7d818",
        "name": "T1027.002"
      },
      {
        "id": "70616b2f-4019-4963-b758-5d9f6f20e201",
        "name": "T1082"
      }
    ],
    "malware": [
      {
        "id": "715948ba-fb9c-425c-95f4-2d741e8cad89",
        "name": "Tenzor",
        "slug": "tenzor"
      },
      {
        "id": "8c5873bd-8c1c-4e93-8886-13a7ef885db7",
        "name": "Rhadamanthys",
        "slug": "rhadamanthys"
      },
      {
        "id": "18c297a8-c10b-4c74-a196-a50c60957f5e",
        "name": "Remus",
        "slug": "remus"
      },
      {
        "id": "856b68d4-b4da-48e7-bd27-b2497d0a5758",
        "name": "AuraStealer",
        "slug": "aurastealer"
      },
      {
        "id": "fe08beba-5fdd-4853-a476-39f96e90b956",
        "name": "VoidStealer",
        "slug": "voidstealer"
      },
      {
        "id": "0051da15-675b-4665-a6d1-872f64cf47ea",
        "name": "Lumma Stealer",
        "slug": "lumma-stealer"
      }
    ],
    "observables": [
      {
        "id": "4559f97c-5e9b-4c6d-87ec-00584454c068",
        "name": "borscer.biz"
      },
      {
        "id": "dec5fc99-cf79-499a-8f91-f8cbe1638004",
        "name": "krondez.com"
      },
      {
        "id": "8ddde865-b344-4ca7-90bb-c2958ef7db13",
        "name": "gluckcreek.online"
      },
      {
        "id": "0ec5c53b-c6c6-461a-ae6f-a649f930550e",
        "name": "siltsoh.biz"
      },
      {
        "id": "6679f541-3490-4d45-93cc-eca8516a51a2",
        "name": "parky.pics"
      },
      {
        "id": "c7ad010f-ff2f-409b-b953-dbfcc82de8ff",
        "name": "padaz.pics"
      },
      {
        "id": "8f1dc150-af72-4e10-977b-542e2f0b63eb",
        "name": "managew.biz"
      },
      {
        "id": "e44538c3-1340-4adc-8eec-0fe43db132a7",
        "name": "josegza.biz"
      },
      {
        "id": "9f7f1d8f-86bc-4d42-b3b3-8b42fdf298b8",
        "name": "chromap.biz"
      },
      {
        "id": "8af01bb1-585f-444a-8d8f-c2955764f0d5",
        "name": "nobleckly.biz"
      },
      {
        "id": "6125ca54-94f7-462a-a5f5-318b3c8cd361",
        "name": "ropea.top"
      },
      {
        "id": "95726422-6e18-47d5-a016-e57e6618db93",
        "name": "navelum.biz"
      },
      {
        "id": "e6762b56-4e78-4724-9da8-f8f6d564b48a",
        "name": "interxo.biz"
      },
      {
        "id": "c4975f4e-3453-4eac-b112-939df6adcca1",
        "name": "cheekiez.biz"
      },
      {
        "id": "588b683f-d4d1-4e84-9509-c0171b5c2ee0",
        "name": "zadno.run"
      },
      {
        "id": "7ee76b2c-89b2-40ff-a776-c96ba964ab40",
        "name": "coox.live"
      },
      {
        "id": "7e9ea0ee-a360-44bd-9cdb-b7f8fdaf40d1",
        "name": "texakgi.cloud"
      },
      {
        "id": "d447b711-5997-409c-a4b7-6d8fdd5b4dbd",
        "name": "chalx.live"
      },
      {
        "id": "52cc68f5-a8a5-46a9-be65-3f52ee261421",
        "name": "nitroca.biz"
      },
      {
        "id": "1b599a84-b6c1-4a12-bfc1-5307d10cb7b9",
        "name": "intem.lat"
      },
      {
        "id": "f8e5b896-8b8a-4aea-8949-5fce2c1d6262",
        "name": "adveryx.biz"
      },
      {
        "id": "748488ee-7f9f-4645-996a-8aa62b28df8a",
        "name": "woodena.biz"
      },
      {
        "id": "f72a04f0-433e-4521-9fdd-e38e1d8806f5",
        "name": "outcrol.biz"
      },
      {
        "id": "0c8ec1d5-bc47-40e2-80ab-d81e9b2a5111",
        "name": "forestoaker.com"
      },
      {
        "id": "35ce91c3-74fd-4e7d-90c3-fd631a3faa88",
        "name": "remnane.biz"
      },
      {
        "id": "492a22a9-de8f-4c62-a313-3986c524f52b",
        "name": "prickaz.biz"
      },
      {
        "id": "619cb75c-14f0-4827-9369-4d6679a30296",
        "name": "backbou.biz"
      },
      {
        "id": "2d0eb5fc-2835-4523-8a71-4e2dc5b13465",
        "name": "drymoge.biz"
      },
      {
        "id": "a7d0fd9d-dc4f-4bf4-a498-3c347a9c5aaa",
        "name": "baxe.pics"
      },
      {
        "id": "4fc40bcd-ab0a-407f-9420-c5233add4f56",
        "name": "vinte.online"
      },
      {
        "id": "3c98e0d7-4e5c-4a28-b1de-0ad923dc886a",
        "name": "buccstanor.pics"
      },
      {
        "id": "c34bc952-f9c2-4d53-b118-c99c0ce42fa5",
        "name": "lazzo.bet"
      },
      {
        "id": "ec9877d6-ab33-43e8-aa15-10e8c1836575",
        "name": "86.107.168.103"
      },
      {
        "id": "fed6d8a7-f10f-4287-b410-bbb619a02086",
        "name": "217.156.122.75"
      },
      {
        "id": "b1215476-b907-4632-8427-4f89a4cba49b",
        "name": "80.97.160.155"
      },
      {
        "id": "e7aae0f2-ce06-4b51-a33f-5f65ab5091f6",
        "name": "45.151.106.110"
      },
      {
        "id": "fb37cba3-11a5-4291-a194-c51a9cd2073d",
        "name": "217.156.122.57"
      },
      {
        "id": "537082c9-c33e-4fbe-828a-d5618b0d8c08",
        "name": "217.156.122.12"
      },
      {
        "id": "cb925ef8-e8d3-4e6f-81cc-0c5e7a104826",
        "name": "http://navelum.biz:3201"
      },
      {
        "id": "7c88f837-a0db-4aca-8d79-21096c4feb61",
        "name": "http://vinte.online:28313"
      },
      {
        "id": "bf16465b-e388-4fde-8bca-3d83bdd7baa6",
        "name": "http://chromap.biz:4219"
      },
      {
        "id": "5ecdb4f5-d5a6-4071-bbe3-13a3fce30883",
        "name": "http://coox.live:28313"
      },
      {
        "id": "f3e0066f-52bd-4e08-9542-48f71ae358e7",
        "name": "http://ropea.top:28313"
      },
      {
        "id": "34d8ea59-acf8-43b7-916b-608639b4db6e",
        "name": "http://prickaz.biz:2039"
      },
      {
        "id": "f23d728b-73ec-418f-bf95-1276f503abf5",
        "name": "http://parky.pics:3989"
      },
      {
        "id": "273af0f3-f489-430a-a426-7ba9d2fd21d2",
        "name": "http://texakgi.cloud:3849"
      },
      {
        "id": "22bdf3f1-e514-4477-ac8b-1e1e8ee6b220",
        "name": "http://zadno.run:4219"
      },
      {
        "id": "1a895ba8-2990-446c-a31c-8f64ab708213",
        "name": "http://forestoaker.com:6290"
      },
      {
        "id": "e8c2535e-c619-473d-a41d-1657c9b62350",
        "name": "http://drymoge.biz:4192"
      },
      {
        "id": "f26c67d4-fa1a-4f77-a2a9-a599fc169944",
        "name": "http://baxe.pics:48261"
      },
      {
        "id": "7ec979a8-ad5e-4e8a-8d18-c2ce6ba48e8b",
        "name": "http://managew.biz:5902"
      },
      {
        "id": "a425aaa5-66b1-4b7c-a304-65cda285b3c2",
        "name": "http://lazzo.bet:3989"
      },
      {
        "id": "9f1f8374-c30c-4916-b3d0-d76afeb41aaa",
        "name": "http://backbou.biz:5902"
      },
      {
        "id": "591f75a0-122a-43cd-92a2-4bfd8af53927",
        "name": "http://nitroca.biz:6782"
      },
      {
        "id": "8d01d940-bf17-4e81-a2f9-806ee905c1da",
        "name": "http://krondez.com:28982"
      },
      {
        "id": "78903495-3c61-4669-8bc9-f70ee4bc73cd",
        "name": "http://siltsoh.biz:7481"
      },
      {
        "id": "98d09d5b-1db9-4ad2-b319-77cd5773c517",
        "name": "http://interxo.biz:7481"
      },
      {
        "id": "359c99e7-5bf3-46bd-a12b-efbc43a15c87",
        "name": "http://josegza.biz:8521"
      },
      {
        "id": "1f14c53d-0d33-42ca-9525-3909152e6791",
        "name": "http://remnane.biz:5692"
      },
      {
        "id": "135d45c1-06f4-4917-9e90-3c1d3813ee76",
        "name": "http://buccstanor.pics:28313"
      },
      {
        "id": "d8e7a530-41c1-4c93-a7eb-93c730462580",
        "name": "http://intem.lat:9592"
      },
      {
        "id": "aff15e19-d832-4cb6-b73c-68dcbce8e2d4",
        "name": "http://gluckcreek.online:48261"
      },
      {
        "id": "081608f9-1faa-4202-89c2-3e86cc595f0f",
        "name": "http://padaz.pics:4219"
      },
      {
        "id": "03efe05d-b153-49f0-8c7d-698036fdb165",
        "name": "http://chalx.live:5902"
      },
      {
        "id": "5a2f4f6d-bf81-4f30-a501-ed6a7d871ac1",
        "name": "http://borscer.biz:9592"
      },
      {
        "id": "df638cc4-c65f-480e-a81d-cccb09d9f7cc",
        "name": "http://buccstanor.pics:48261"
      },
      {
        "id": "69219154-f2ec-4c1b-98db-61325a443cf1",
        "name": "http://woodena.biz:7821"
      },
      {
        "id": "8209762e-0438-44d0-9473-b5b19a0ec7c1",
        "name": "http://outcrol.biz:4895"
      },
      {
        "id": "00e48a65-3897-4588-b2fe-6acb4e58af82",
        "name": "http://adveryx.biz:6573"
      },
      {
        "id": "",
        "name": "8b6b238ffa6e411229c6754ba99f7b990c49edfb2c34068ce0ac5564824d71ad"
      },
      {
        "id": "",
        "name": "c3f7cea80dbafaa90a88b28a6dfb1227caaf5c2a29f0ce06bf663d6ed2cfc079"
      },
      {
        "id": "",
        "name": "8653d7158486aa10fc0078c3ca9318cd7ace05d4b3e6f3b1fb84ffb7a6a339ec"
      },
      {
        "id": "",
        "name": "0580ebf601989457f0708799b431fd4d9f5e59d98838282d72936099aa6636da"
      },
      {
        "id": "",
        "name": "002f714f93bed53f165129a820c2d5b72227f1cafac43be19e5e223ce219a5e1"
      },
      {
        "id": "",
        "name": "066c4ab954fc1270ee62c0d7c582c4c691e58e0ffef0c654bc204a46e440d16d"
      },
      {
        "id": "",
        "name": "dbf6facd28406361a6a81417b3ff5eb272ccc8dcc58a36bd5335a253ae4bf036"
      },
      {
        "id": "",
        "name": "0683f353cf3e101f721f1658e2a554ff7888ff9f2c32e23ceb3d23876864a264"
      },
      {
        "id": "",
        "name": "a4f111e5425690fcd384c62ecb5b57b0f645925572af3541748e01d810cd2b40"
      },
      {
        "id": "",
        "name": "b037fa1dd769891b538d9ca26131890c93e3458eec96c5354bdebe50d04a5b3d"
      },
      {
        "id": "",
        "name": "484e3ab5d425a97819f01dcc330e005dc444c51625bfdcd7ea9a3954018d1fc9"
      },
      {
        "id": "",
        "name": "cab7855ccfca19a06eea76e0e170f592dcc95906ecfa5436f5a11947e04e63d5"
      },
      {
        "id": "",
        "name": "0a8f734f10400f7ae8fef591147e78dab6350089683be84c1cb6c82113cb1319"
      },
      {
        "id": "",
        "name": "25e74a76f2f3601abcb20fd743a7e3cf3befd5a3838c7501af5d87d293233809"
      },
      {
        "id": "",
        "name": "ab2e47720388fa201e242552f8d8b82363c6c52f6c63fa3fec9dce027cb12e77"
      },
      {
        "id": "",
        "name": "64db10e76b46be8db36e02993d36559bc3f86606c9ea955731872b716c8f0c69"
      },
      {
        "id": "",
        "name": "788b56e9be2f1dd6a977dce0265f293ab42d3e8ffb287ab584e169fbf115da1f"
      },
      {
        "id": "",
        "name": "4428c3ffe2532f162f31d7573bbc1cca2299195421da3d8e8a3e535e9fc42b08"
      },
      {
        "id": "",
        "name": "bc11d036fe59abb3915f736307c56d2fd43e8127e46c31f926eeda864f4d66dc"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "prickaz.biz"
      },
      {
        "id": "",
        "name": "nobleckly.biz"
      },
      {
        "id": "",
        "name": "borscer.biz"
      },
      {
        "id": "",
        "name": "forestoaker.com"
      },
      {
        "id": "",
        "name": "adveryx.biz"
      },
      {
        "id": "",
        "name": "buccstanor.pics"
      },
      {
        "id": "",
        "name": "siltsoh.biz"
      },
      {
        "id": "",
        "name": "chalx.live"
      },
      {
        "id": "",
        "name": "interxo.biz"
      },
      {
        "id": "",
        "name": "ropea.top"
      },
      {
        "id": "",
        "name": "baxe.pics"
      },
      {
        "id": "",
        "name": "intem.lat"
      },
      {
        "id": "",
        "name": "chromap.biz"
      },
      {
        "id": "",
        "name": "navelum.biz"
      },
      {
        "id": "",
        "name": "remnane.biz"
      },
      {
        "id": "",
        "name": "parky.pics"
      },
      {
        "id": "",
        "name": "nitroca.biz"
      },
      {
        "id": "",
        "name": "padaz.pics"
      },
      {
        "id": "",
        "name": "krondez.com"
      },
      {
        "id": "",
        "name": "backbou.biz"
      },
      {
        "id": "",
        "name": "managew.biz"
      },
      {
        "id": "",
        "name": "coox.live"
      },
      {
        "id": "",
        "name": "josegza.biz"
      },
      {
        "id": "",
        "name": "outcrol.biz"
      },
      {
        "id": "",
        "name": "cheekiez.biz"
      },
      {
        "id": "",
        "name": "zadno.run"
      },
      {
        "id": "",
        "name": "drymoge.biz"
      },
      {
        "id": "",
        "name": "gluckcreek.online"
      },
      {
        "id": "",
        "name": "vinte.online"
      },
      {
        "id": "",
        "name": "texakgi.cloud"
      },
      {
        "id": "",
        "name": "lazzo.bet"
      },
      {
        "id": "",
        "name": "woodena.biz"
      }
    ]
  },
  "external_refs": [
    {
      "id": "65f2e159-92d0-455b-a680-639d7b89117a",
      "standard_id": "external-reference--bb3ca3df-af34-5f38-83e7-4f127b3e0bca",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://otx.alienvault.com/pulse/69d61cf42af050999ace2be6",
      "hash": null,
      "external_id": "69d61cf42af050999ace2be6",
      "created": "2026-04-08T11:01:50.392Z",
      "modified": "2026-04-08T11:01:50.392Z",
      "createdById": null
    },
    {
      "id": "950b99c2-6905-4a22-acc8-f272e117de24",
      "standard_id": "external-reference--f2ce1d66-cabb-505a-9f27-2b9b1f40dfc2",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://www.gendigital.com/blog/insights/research/remus-64bit-variant-of-lumma-stealer",
      "hash": null,
      "external_id": null,
      "created": "2026-04-08T11:01:50.415Z",
      "modified": "2026-04-08T11:01:50.415Z",
      "createdById": null
    }
  ]
}