- Thread Author
- #1
LummaC2 - Stealer, 90% knockback, reverse proxy
LummaC2 - stealer, average hit rate 75-80%, works even on clean systems, no dependencies (AT ALL), log decryption on the server, build weight 150-200 KB (depends on cleaning), steals browsers based on Chromium and Mozilla, excellent low-level fast file grabber, steals 60 browser cryptocurrency and 2FA extensions, updates literally every two hours, add your specific browser or your specific extension - 2 minutes!
Lots of technical information (skip)
The language used in development is C, which allows you to easily morph the stealer later.
High-level WINAPI is hardly used
All interaction with the OS occurs through calls to a low-level wrapper written in ASM over system calls, no WinAPI, only manual syscall calls
Implemented Heavens Gate technology allowing to switch from WoW64 mode
Where WinAPI is used, its calls are encrypted (read custom GetProcAddress)
All decryption is completely server-based, all data transmitted by the stealer is decrypted on the server
In order to increase the response, data is sent in chunks.
The build weight is 150 KB, CRT is present, I didn't disable it, if the weight is very important, I can link CRT from another studio, the weight will decrease, UPX will compress the build to 80 KB, but I don't recommend doing this
There is a neighbor detection system, a traffic quality monitoring system
File grabber also works through low-level system calls
The whole code is 100% unique (not a paste from other stealers, and not even a paste from the previous version of this stealer LummaC)
System calls support ARM, x86, x64 architectures, which allows you to run the stealer even on new Macs in Windows virtual machines (I personally have a wallet there, use it :))
Stealer has been tested on operating system versions from Windows 7 x32 to Windows 11 x64 with the latest updates.
Contact DrStone Global Network
______________________________________________________________________________________________________________________
Email General Support: drstone25@proton.me
Additional Email: drstone25@tuta.io
Session ID: 0515c0aca62eb5ac64bf8dff8c2e228c0edd92dcd9b59776810b75b68de685fc1a
Telegram Username: @quickdoc
WhatsApp (text/call): +1 (215) 703-8537
Telegram: @quickdoc
Signal (text/call): @drstone.25
Telegram Link: Dr Stone
DrStone Global Network is here to assist you!
_________________________________________________________________________ drstone25@tuta.io
Information for users
Crypt is needed, although in scantime without crypt the stealer is completely clean (FUD) crypt is needed so that it does not leak anywhere in its pure form
See the latest scans from CheckZilla in the posts below
In case of the end of the subscription, your traffic will not disappear as soon as you renew the subscription, all logs during the period of your inactivity will be waiting for you in the panel, this applies to ALL tariff plans. Thus, even if you forget to pay for the subscription on time, you will not lose a cent
In case of finding a bug that caused your downtime, if you are able to repeat it and confirm it, we will act by agreement from the options:
a) full refund;
b) subscription extension for the period of downtime + 3 days
As sad as it may sound - the percentage of tapping is guaranteed only at the time of writing this topic, but I undertake to maintain the proper tapping and update the functionality in a timely manner (note that I could have SIMPLY not written this)
Tariffs
[Experienced] $250 / month:
- All the features of the previous privileges
- Set filters up to 10 pieces
- Download logs in bulk
- Ability to upload logs by your search query (example - only with wallets or only from instagram.com)
- Ability to use search by parameters (country, with or without currency, with a specific filter)
- Ability to clear empty ones, empty statistics on the "log quality" page
[Professional] $500 / month:
- All the features of the previous privileges
- The number of filters is unlimited
- You can delete logs in bulk (resetting the counter)
- Ability to share your statistics with others
- Log quality widget available
- Filter widget available
- Expanded search, search and upload of logs by request available (in cookies / in passwords)
- Ability to monitor the number of neighbors by logs
- Log quality assessment system available
- All innovations first appear here, then move (or do not move) to the groups below
[Corporate] $1000 / month:
- Possibilities of previous privileges
- Dedicated build cleaning line, the build is cleaned more often
- Improved bypass of proactive protection, the build lives longer, the knockback is more than the previous ones by an average of 10-15%
- Perfect for pinpoint spills you know where
Read all UPDATES in the comments (posts) to the topic! There are a lot of updates, I don’t have time to add them all here :)
The knockback percentage was tested with the cheapest crypto; The capabilities of the panel and stealer vary depending on the selected group; By agreement, I can introduce any functionality at the discretion of the client, including changing the tariff grid and adding other tariffs; The price is not indexed for clients who purchased a tariff, prices are indexed only for new clients; FOR DRAINING ON VT AND OTHER UNTRUSTED SERVICES, BAN WITHOUT REFUND; by making a deal, you automatically agree to these terms; there are no moneybacks if the panel was logged in;
Contact DrStone Global Network
______________________________________________________________________________________________________________________
Email General Support: drstone25@proton.me
Additional Email: drstone25@tuta.io
Session ID: 0515c0aca62eb5ac64bf8dff8c2e228c0edd92dcd9b59776810b75b68de685fc1a
Telegram Username: @quickdoc
WhatsApp (text/call): +1 (215) 703-8537
Telegram: @quickdoc
Signal (text/call): @drstone.25
Telegram Link: Dr Stone
DrStone Global Network is here to assist you!
_________________________________________________________________________ drstone25@tuta.io
LummaC2 - stealer, average hit rate 75-80%, works even on clean systems, no dependencies (AT ALL), log decryption on the server, build weight 150-200 KB (depends on cleaning), steals browsers based on Chromium and Mozilla, excellent low-level fast file grabber, steals 60 browser cryptocurrency and 2FA extensions, updates literally every two hours, add your specific browser or your specific extension - 2 minutes!
Lots of technical information (skip)
The language used in development is C, which allows you to easily morph the stealer later.
High-level WINAPI is hardly used
All interaction with the OS occurs through calls to a low-level wrapper written in ASM over system calls, no WinAPI, only manual syscall calls
Implemented Heavens Gate technology allowing to switch from WoW64 mode
Where WinAPI is used, its calls are encrypted (read custom GetProcAddress)
All decryption is completely server-based, all data transmitted by the stealer is decrypted on the server
In order to increase the response, data is sent in chunks.
The build weight is 150 KB, CRT is present, I didn't disable it, if the weight is very important, I can link CRT from another studio, the weight will decrease, UPX will compress the build to 80 KB, but I don't recommend doing this
There is a neighbor detection system, a traffic quality monitoring system
File grabber also works through low-level system calls
The whole code is 100% unique (not a paste from other stealers, and not even a paste from the previous version of this stealer LummaC)
System calls support ARM, x86, x64 architectures, which allows you to run the stealer even on new Macs in Windows virtual machines (I personally have a wallet there, use it :))
Stealer has been tested on operating system versions from Windows 7 x32 to Windows 11 x64 with the latest updates.
Contact DrStone Global Network
______________________________________________________________________________________________________________________
Email General Support: drstone25@proton.me Additional Email: drstone25@tuta.io Session ID: 0515c0aca62eb5ac64bf8dff8c2e228c0edd92dcd9b59776810b75b68de685fc1a Telegram Username: @quickdoc WhatsApp (text/call): +1 (215) 703-8537 Telegram: @quickdoc Signal (text/call): @drstone.25 Telegram Link: Dr StoneDrStone Global Network is here to assist you!
_________________________________________________________________________ drstone25@tuta.io
Information for users
Crypt is needed, although in scantime without crypt the stealer is completely clean (FUD) crypt is needed so that it does not leak anywhere in its pure form
See the latest scans from CheckZilla in the posts below
In case of the end of the subscription, your traffic will not disappear as soon as you renew the subscription, all logs during the period of your inactivity will be waiting for you in the panel, this applies to ALL tariff plans. Thus, even if you forget to pay for the subscription on time, you will not lose a cent
In case of finding a bug that caused your downtime, if you are able to repeat it and confirm it, we will act by agreement from the options:
a) full refund;
b) subscription extension for the period of downtime + 3 days
As sad as it may sound - the percentage of tapping is guaranteed only at the time of writing this topic, but I undertake to maintain the proper tapping and update the functionality in a timely manner (note that I could have SIMPLY not written this)
Tariffs
[Experienced] $250 / month:
- All the features of the previous privileges
- Set filters up to 10 pieces
- Download logs in bulk
- Ability to upload logs by your search query (example - only with wallets or only from instagram.com)
- Ability to use search by parameters (country, with or without currency, with a specific filter)
- Ability to clear empty ones, empty statistics on the "log quality" page
[Professional] $500 / month:
- All the features of the previous privileges
- The number of filters is unlimited
- You can delete logs in bulk (resetting the counter)
- Ability to share your statistics with others
- Log quality widget available
- Filter widget available
- Expanded search, search and upload of logs by request available (in cookies / in passwords)
- Ability to monitor the number of neighbors by logs
- Log quality assessment system available
- All innovations first appear here, then move (or do not move) to the groups below
[Corporate] $1000 / month:
- Possibilities of previous privileges
- Dedicated build cleaning line, the build is cleaned more often
- Improved bypass of proactive protection, the build lives longer, the knockback is more than the previous ones by an average of 10-15%
- Perfect for pinpoint spills you know where
Read all UPDATES in the comments (posts) to the topic! There are a lot of updates, I don’t have time to add them all here :)
The knockback percentage was tested with the cheapest crypto; The capabilities of the panel and stealer vary depending on the selected group; By agreement, I can introduce any functionality at the discretion of the client, including changing the tariff grid and adding other tariffs; The price is not indexed for clients who purchased a tariff, prices are indexed only for new clients; FOR DRAINING ON VT AND OTHER UNTRUSTED SERVICES, BAN WITHOUT REFUND; by making a deal, you automatically agree to these terms; there are no moneybacks if the panel was logged in;
Contact DrStone Global Network
______________________________________________________________________________________________________________________
Email General Support: drstone25@proton.me Additional Email: drstone25@tuta.io Session ID: 0515c0aca62eb5ac64bf8dff8c2e228c0edd92dcd9b59776810b75b68de685fc1a Telegram Username: @quickdoc WhatsApp (text/call): +1 (215) 703-8537 Telegram: @quickdoc Signal (text/call): @drstone.25 Telegram Link: Dr StoneDrStone Global Network is here to assist you!
_________________________________________________________________________ drstone25@tuta.io