# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: kralcan stealer, lucid stealer

# Reference: https://x.com/solostalking/status/2053696616104857659
# TITLE-HOST/IP=Lucid Stealer

http://151.243.24.253
http://85.239.155.68
85-239-155-68.plesk.page
ghdfhfjhfg.webhop.me
iloveyoulucid.space
lucidstealer.one
0kt.one
redehappy.com
storedonutsmp.net

# Reference: https://x.com/Jane_0sint/status/2060279244647747708
# Reference: https://tria.ge/260525-a2mppadt3z/behavioral1

45.138.16.107:3001

# Reference: https://www.virustotal.com/gui/file/073d8b418ea179ada3a9abb2fdc4704a6740971c29217eae7a4eac01efc5fc1c/detection
# TITLE-HOST/IP=kralcan priv

iloveblondegirl.top

# Reference: https://x.com/malwrhunterteam/status/2065009236363432262
# Reference: https://tria.ge/260611-l2ws5sb12k/behavioral1

http://104.234.18.91
104.234.18.91:3000
104.234.18.91:3001
104.234.18.91:9000
proemre.space

# Reference: https://www.virustotal.com/gui/file/010d858955bad6bacd72cbc2aa6460664337a7ae0ae05f0aa5e78524afe619e0/detection

http://185.103.166.93
185.103.166.93:3001
lucidxd.space
