AI-Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution =========================================================================================================== Indicator Detection name Description =========================================================================================================== Files =========================================================================================================== c36e15f0532569d789ba9fdbfccf6a1bb5ac2c75 Trojan.LUA.SMARTLOADER.THBBDBE Malicious LUA Script 2a2ef9cd83bdb635bb3da2fe6b6a42c9b0cc657f Trojan.LUA.SMARTLOADER.THBBDBE Malicious LUA Script 43eae0fb588987107a4805ecd1cf5c301263643b Trojan.LUA.SMARTLOADER.THBBDBE Malicious LUA Script =========================================================================================================== ZIP file hashes =========================================================================================================== 082b2d602c39488b7220523cc9d9a03f4cff53bc 9953b71fe900614844737a8dba726d2c0dc7ca51 fb7a7cb18055a8fa617c707ee784bd292d8bb0ab 28b6a72672848e8ee7bbe00c839e899160fed839 496f07dfccc038d7090f6ecc273f0505b2b102bf cc4d85f11a4dc8e8cbe3f49f758bb8100485bd84 0f18746b59f33ca8480475ef91fdd01ea1e3eac4 7367ef2b7836682f248bbc97539e9e9e67d92a20 5ed50cba806d2079198e0b17385e9166ecdc39cd f11acd444d07ba4322f2b9c9c95bc1e26a03e617 2aed982366efcc32490487c82621ddff6348efa4 559bcdd9152d76b38b231dc024e66d82ce7db08f 414917635afdd6718840e6e689da773f8865e6a7 c176528eb230cc5b485a528ec0e2bcc9329ec875 813f977b8757587529dd1be5709503d2d7071fb5 e1d5c2344d204253932ae0bb57e87927db535394 e70848f41b597776238ca26c8428133eeeed7408 fcd528e8775a4827223357ca28e8ee8156005954 ae54422e334e0cbcf839955fbe2986a7d886b894 93aa2fe0456b4795ce21cecc7db75068cc2ff159 4f3fbe9a1c37aa0ee7ed4d4a2feb4e1af7dffa81 e53598fc0451cf39438f029bb0365dd29013c089 5fc426d7f48e00266cead84746504b2067d74e32 =========================================================================================================== C&C servers =========================================================================================================== 213[.]176.73.80 SmartLoader C&C server 95[.]164.53.100 SmartLoader C&C server 94[.]156.114.56 SmartLoader C&C server 150[.]241.105.82 SmartLoader C&C server pasteflawwed[.]world LummaStealer CC&C server =========================================================================================================== Fake repositories =========================================================================================================== hxxps[:]//github[.]com/Afjhr/iExplorer-Free/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/Aksoo7/SoLBF/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/BashSpiceRB/QuasarRAT-Remote-Access-Tool/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/CPSGDPS/Employe-time-tracker/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/Communismbelike/Delta-Executor/releases/download/v2.0/Program[.]zip hxxps[:]//github[.]com/DENYS849/Krnl-Lua-Script-Injector-for-Roblox-Game-Development/releases/download/v1.0/Release[.]zip hxxps[:]//github[.]com/Devansh-2795/Al-Photoshop-2024/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/Diapiffy/setup/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/Dropeed10/synapse-x-roblox-free/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/EricSRibas/linux-studies/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/Garuadi/Rainbow-S1x-Siege-Cheat/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/ItzGame123/counter-str1ke-2-h4ck/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/JhonlorenzManadeo/fridaDownloader/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/JhonlorenzManadeo/fridaDownloader/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/JihuR/Cheat-CS2/releases/download/v2.0/Release_x64[.]zip hxxps[:]//github[.]com/Justanamelessghoul/Atlantis-Executor/releases/download/v2.0/Release_x64[.]zip hxxps[:]//github[.]com/Maratct/Coin-Sniper-Bot/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/ONDEXU/Discord-AllinOne-Tool/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/Proffesional123/FiveM-Spoofer/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/SRS-Rahul/Luna-Executor/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/SingLoveMyself/C2Panel/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/TiagoSevero2023/Wondershare-Filmora-Free/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/VitorNsousa/moonlight-launcher/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/Xaviertya/.dotfiles/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/ZidanQawy/awesome-kde/releases/download/v1.0/Application[.]zip hxxps[:]//github[.]com/carel566/linux-rootkit/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/crispyman1245/BazaarFlipMod/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/ehsan14123/Wave-Roblox/releases/download/v2.0/Release_x64[.]zip hxxps[:]//github[.]com/gamingboy22/Energy-Valorant-Skin-Changer-Hack-Esp-Aimbot-FlickBot/releases/download/v1.0/Release[.]zip hxxps[:]//github[.]com/hylex280/Instagram-Reporter/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/jjkj67/IDA-Pro-Keygen-2024/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/krishioer/FiveM-Mod-Menu/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/levy0157/caddy-defender/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/luckee8898/Tenorshare-ReiBoot-Pro-Download/releases/download/v1.0/Application[.]zip hxxps[:]//github[.]com/mmfazzr06/Grok-3/releases/download/v3.0/Grok[.]zip hxxps[:]//github[.]com/ne-ted/Free_US_Investment_Agent_System/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/pacewiliam/AI-Jailbreaks/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/phatcao2910/FBI_Watchdog/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/rafy35198/JJsploit/releases/download/v1.0/Release[.]zip hxxps[:]//github[.]com/sangdeptrai20/Exodus-Fake-Balance/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/sansiwo/zen-focus/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/senseiFC/wallet-stealer/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/sh0uko/ClintonCAT/releases/download/v1.0/Installer[.]zip hxxps[:]//github[.]com/stcoid1/Grok-3/releases/download/v3.0/Grok[.]zip hxxps[:]//github[.]com/tamin1111/UNIVERSAL-HWID-SPOOFER/releases/download/v2.0/Software[.]zip hxxps[:]//github[.]com/toniadrenalin/hack-crypto-wallet/releases/download/v1.0/Application[.]zip hxxps[:]//github[.]com/user-attachments/files/18585082/Software[.]zip hxxps[:]//github[.]com/user-attachments/files/18630095/Software[.]zip hxxps[:]//github[.]com/user-attachments/files/18722098/Application[.]zip hxxps[:]//github[.]com/uwuwuwu363/tts-local/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/vrus67/CrystalTool/releases/download/v1.0/Software[.]zip hxxps[:]//github[.]com/xuantruong7/IDM-Activation-Script-2025/releases/download/v1.0/Application[.]zip hxxps[:]//github[.]com/xxsfytd/snoopy/releases/download/v2.0/Software[.]zip