LummaC2 - universal stealer, a malware for professionals.

['bizure']

LummaC2 is a new generation stealer, which average response is currently 90%.

• Works on clean systems, no dependencies at all, log decoding completely on server, build weight 150-200KB (depends on cleanup). Steals browsers based on Chromium and Mozilla. Excellent low-level fast file grabber, steals ~70 browser-based cryptocurrencies and 2FA extensions. Аlso has the latest and unparalleled development - a binary morpher!
• LummaC2 updated literally every two hours, add your specific browser or your specific extension - 2 minutes!
• Stealer can be put on your botnet.
• There's a setting for knocking logs to Telegram.

Screenshots of panel

Technical information:​

-The language used in development is C​

-Almost no high-level WINAPI is used​

-All interaction with the operating system is through low-level wrapper calls, written in ASM, over system calls, no WinAPI, only manual syscall calls​

-Implemented Heavens Gate technology allowing to switch from WoW64 mode​

-Where WinAPI is used - its calls are encrypted (read custom GetProcAddress)​

-All decryption is fully server-side, all data sent by the stealer is decrypted on the server​

-In order to increase response data is sent in chunks​

-The weight of the build is 150KB, CRT is present, not turned off, who is very important weight can link CRT from another studio, the weight will decrease, UPX compresses the build to 80KB, but do so do not recommend​

-Neighbor detection system, traffic quality monitoring system​

-File grabber also works through low-level system calls​

-All code is 100% unique (not the paste from other stealers, not even the paste from a previous version of the LummaC stealer)​

-System calls support ARM, x86, x64 architectures, allowing you to run it even on new macs in virtual Windows machines​

-Stealer is tested on versions of operating systems ranging from Windows 7 x32 to Windows 11 x64 with the latest updates​

•All code on which this product was written is 100% unique! Crypt is mandatory.

FAQ​

Question: What happens after my subscription ends?​

Answer: If your subscription ends, your traffic will not go anywhere, after the resumption of the subscription, logs during your inactivity will be waiting for you in the panel, this applies to ALL tariff plans.​

Question: What guarantee on bounce rate?​

Answer: It is impossible to say for sure at any particular moment, it depends on crypto and on how much time has passed after cleaning. In average on different exchanges and different crypto is 75%.​

Question: If I bought some tariff and its price increased during the process, will I pay this difference in price?​

Answer: The clients, who bought the tariff the price is not indexed, the prices are indexed only for the new clients.​

Question: How often does the cleaning take place?​

Answer: We try to clean the build as often as possible. All tariffs except corporate are cleaned every 5 days. Corporate rate is cleaned every 2 days.​

Pricing Plans​

EXPERIENCED
-Set filters up to 10 .
- Download logs in bulk
- Possibility to upload logs by your search query (for example - only with wallets or only with instagram.com)
- Ability to use search by parameters (country, with or without currency, with a specific filter)
- Ability to clear dumps, dumps statistics on the "quality of logs" page
PRICE: $250/month

PROFESSIONAL
- All features of previous privileges
- Unlimited number of filters
- Logs can be deleted in bulk (by zeroing the counter)
- Share your stats with others
- Logs quality widget available
- Filter widget is available
- Search widened, logs search and downloading is available by request (in cookies/passwords)
- Ability to monitor number of neighbors in logs
- Logs quality rating system available
- All innovations appear here first, then move (or not) to groups below
PRICE: $500/month

CORPORATE
- Previous privileges features
- Dedicated build cleanup line, build is cleaned more often
- Improved bypass of proactive protection (no message LummaC2.exe tries to access password store), build lives longer
- Great for you-know-where point-level security breaches
PRICE: $1.000/month

• Added a system to automatically check hashes of given out files on VirusTotal, whose hash will be found clean:

BAN WITHOUT REFUND (applies to all tariffs)

• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

• LummaC2 does not work in CIS countries. It is not possible to enable this function even for money.

 

['bizure']

Builds are cleaned.
Buy subscription:
• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Summer has arrived, and what's summer without the sea, shish kebab, and a promotion on LummaC2?
We are preparing very serious updates for our customers. Get your LummaC2 subscription with 10% off (until 7/07 included):

Experienced = 250$ 225$
Professional = 500$ 450$
Corporate = 1000$ 900$

Buy subscription right now - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Builds are cleaned.
Buy subscription:
• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Update 12.07
One of the biggest updates that we have been preparing for a long time, it is now possible to customize EVERYTHING that builds stealer! The ability to add your own extensions, your own paths, the ability to create configurations (hereinafter profiles), and when downloading a build to assign it a specific profile and edit the rules right during the shedding! This grabber is the most flexible on the market.
ATTENTION! The functionality is available starting from the tariff [Professional].
1. Ability to create and edit grabber profiles
2. Ability to add and remove extensions
3. Ability to add and remove browsers
4. Ability to add and remove paths for looting
5. Ability to use masks as well as variable paths
6. Ability to edit the data to be collected and the order of data collection, e.g. someone needs to collect cid phrases first and someone needs to collect chrome first
7. Ability to customize the depth of data collection
8. Ability to always roll back to default settings
9. Ability to create an unlimited number of rules in the profile
10. Ability to edit profile "hot", to change data collected by the stealer right during spreading
11. On the download page it is now possible to select the profile with which the build will work.
12. Builds are cleaned.


• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Builds are cleaned.
Buy subscription:
• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Update 19.07
1. There is now a Loader inside the stealer that can load files to the victim machine at any stage of program execution
2. Ability to load EXE files
3. Ability to load DLL files
4. Ability to load PowerShell files
5. The ability to disable screenshot collection has appeared
6. Ability to enable self-deletion after workback
7. Improved fault tolerance, when custom pads are unavailable, styler switches to one of the main pads
8. Now the really important innovation.... The "Grabber" tab has been renamed to the "Config" tab, it makes more sense now
9. Added several new fields to System.txt, in particular - domain group

• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Buy subscription right now:
• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Update 21.07

1. On the logs page it is now possible to search by application
2.Time interval is now more convenient to select (time interval mask coincides with the mask of log arrival time).
3. The time interval now works on an "inclusive" basis
4. It is now possible to scroll through all pages at once on the logs page (the END button).
5. The work of the panel has been optimized

• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Buy subscription right now:
• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Update 27.07
One of the updates that seems insignificant from the client side, but gives a very big step forward to those who work with malware and stealers in particular. It's no secret that the main problem with stealers is that the build starts to die immediately after cleaning and gradually the knock of the once crystal clear build comes to naught, but even worse - you have to wait until the cleaning is done. We fix this problem. Now when you click on the button to download a build you will always... A randomly generated build thanks to our morpher. And yes, this is not the source morpher which is optimized during compilation, this is not cheap knockoffs of competitors, this is a personal development on which we spend a lot of time and money, this is a product of a different quality, which allows you to make completely different builds every compilation (they even have different weights), so do not confuse this development with Garble (obfuscator for Golang, hello to all stealers on Go), and now this beast is available in senior rates.

1. Now when downloading a build in the panel you will always get a randomly generated build.
2. A general cleanup has been done for all tariffs.

• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Thinking about buying a subscription to LummaC2? Especially for you we have made an actual full review with description and advantages of our product over competitors. Hundreds of satisfied customers, impeccable market reputation and the latest unique developments - choose the best service.
Full description of LummaC2 (CLICK)

 

['bizure']

Buy subscription right now:
• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Update 31.07
1. Cleaned up
2. Fixed problem with non-unique HWID, which could cause logs to be split
3. Improved fault tolerance, critical server processes are now automatically restarted in case of crashes and any other mishaps, and traffic is routed to the backup server
4. Disabled IPv6 on the main pavement now all IPv6 (where possible) are automatically translated to IPv4.

• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Update 2.08
1. Filters can now be added comma-separated, in hundreds and dozens at once
2. Due to the increased functionality, menu items are now named more logically
3. On the page of logs according to the tariff there is now a button "Remove empty items". 3.
4. The button to delete all logs is now painted in bright red color, so that in addition to warnings that it will demolish irrevocably all logs was also color indication for those who can not read and oriented on color
5. Fixed an error with the detection of neighbors when normal logs on the meter could go into the minus.

• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Update 5.08
1. Cleaned up
2. Now it is possible to specify masks separated by commas in the filegrabber settings.
3. You can now specify a limit on the size of the collected file in the file grabber settings
4. New extensions added to the standard config: Rabby, Pontem, Martian, Bitwarden, Nami, Petra, Sui, ExodusWeb3, Binance Wallet, Sub, PolkadotJS, Talisman, MEWCX, EnKrypt, CryptoCom
5. New email clients added: TheBat, Pegasus Mail, Mailbird, EmClient
6. Added new masks to the grabber


• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Update 7.08
1. Neighbor detector now appears in the general list of logs
2. Neural network is now trained to detect bots among your logs

• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Update 10.08
1. Build tags are now available in the [Experienced] plan, it is possible to set up to three tags, including the standard build tag.
2. Plans above [Experienced] can create as many build tags as they like
3. Fixed a bug with forbidden characters in build tags.
4. Cleaned up

• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Update 17.08
Creating gasket is now more logical. No need to enter your telegram. You write to the support - he gives you a gasket, you activate it when you need it.
1. Changed the logic of issuing gaskets
2. Removed the premoderation of gaskets
3. Gaskets are now ordered faster
4. Redesigned gasket page


• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)

 

['bizure']

Update 21.08.
1. The filters functionality has been updated, now you can specify as many filters as you want and combine them into tags
2. The filters page has been completely redesigned
3. Made it possible to select the color and tag of a new filter
4. Redesigned filter search, now you can search not by a specific URL, but immediately by tag
5. It is now possible to delete logs by search query, for example, for a certain period of time, or only with wallets, or delete only downloaded ones
6. The page "My logs" began to behave more logically, for example, the button "unload all logs" or "unload logs by search query" is removed if there are no logs in fact.

• Contacts(RU/EN):
Support/Seller - @lummaseller126
Telegram Channel (Clickable)