G1006 - Earth Lusca

Earth Lusca is a suspected China-based cyber espionage group that has been active since at least April 2019. Earth Lusca has targeted organizations in Australia, China, Hong Kong, Mongolia, Nepal, the Philippines, Taiwan, Thailand, Vietnam, the United Arab Emirates, Nigeria, Germany, France, and the United States. Targets included government institutions, news media outlets, gambling companies, educational institutions, COVID-19 research organizations, telecommunications companies, religious movements banned in China, and cryptocurrency trading platforms; security researchers assess some Earth Lusca operations may be financially motivated.

Author
agomez
Created
2023-03-03 15:50:45
Last updated
2026-02-07 19:01:47
Downloads
310394
Hostname indicators
5
Sample indicators
17

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

obo.videocenter.org Hostname

modified 2026-10-12 16:25:22
Earth Lusca (Maltiverse) · Calypso (Maltiverse)

live.musicweb.xyz Hostname

modified 2026-10-09 20:38:49
Earth Lusca (Maltiverse) · Calypso (Maltiverse) · Malicious URL (Hybrid-Analysis)

6dea7f976a3dc359e630ab5e85fa69f114fc046dcc363598e998e1ef9751bbed Sample

modified 2026-10-08 04:24:53
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

bdc6a2985a07ef3c5d2ef2a0eb53afdfdbf757bfa080e8b77ba4b47c1a99b423 Sample

modified 2026-10-08 01:06:19
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

1af2037acbabfe804a522a5c4dd5a4ce.exe Sample

modified 2026-10-07 01:53:47
Electrum (Maltiverse) · TitanStealer (MalwareBazaar Abuse.ch) · Earth Lusca (Maltiverse)

f8c5feaae3f8e4bfb37edf4e05d1ee91797023bdf71e1c45ed2711861b300f37 Sample

modified 2026-10-05 23:20:19
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

aea823d6446fbf9059391125a9b7fceb9f433b846275d28dc5f433645984a683.exe Sample

modified 2026-10-04 01:03:59
Electrum (Maltiverse) · Spyware (VM-Ray) · Injector (VM-Ray) · Earth Lusca (Maltiverse)

backdoor.win64.shadowpad.as Hostname

modified 2026-10-03 20:53:04
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

16c6558634759e6efd4581de60cc2050d99a53245c6abde3d38fc140204777e9 Sample

modified 2026-10-03 19:48:20
Earth Lusca (Maltiverse) · Calypso (Maltiverse)

01e2a830989de3a870e4a2dac876487a.exe Sample

modified 2026-09-19 11:18:03
Electrum (Maltiverse) · TitanStealer (MalwareBazaar Abuse.ch) · Earth Lusca (Maltiverse)

17272a56cbf8e479c085e88fe22243685fac2bc041bda26554aa716287714466 Sample

modified 2026-09-18 11:24:19
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

05ed1feda4a1684f8f7907644500948f4488a60ecb0740f708e08c1812b7f122 Sample

modified 2026-09-18 11:24:17
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

0122734490fe4dfb287d34394667d81ab46e0d05d4569d06a41f0f3c3a36448c Sample

modified 2026-09-18 11:24:15
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

4805a7a386fac1af9a80ab24d95ebf4699c35a7c38fcf3eefa571b9d67d7bf45 Sample

modified 2026-09-18 11:24:13
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

253f474aa0147fdcf88beaae40f3a23bdadfc98b8dd36ae2d81c387ced2db4f1 Sample

modified 2026-09-18 11:24:08
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

225b0adce4fab783d0962852894482e7452e5483bf955757cb25e6a26c3d3b38 Sample

modified 2026-09-18 11:24:06
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

valorantcheatsboss.com Hostname

modified 2026-09-03 02:22:09
Earth Lusca (Maltiverse) · Malicious URL (Hybrid-Analysis)

tech.learningstudy.xyz Hostname

modified 2026-09-03 02:22:03
Earth Lusca (Maltiverse) · Malicious URL (Hybrid-Analysis)

7e8c6961a10c95a5d97aece92c2e2d974d63ede98196413cc0cf033f92084f53 Sample

modified 2025-11-24 04:09:12
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

2 Sample

modified 2025-10-24 01:49:27
Earth Lusca (Maltiverse) · Generic Malware (Hybrid-Analysis)

bounty-26274900544419549 Sample

modified 2025-10-24 01:12:04
Earth Lusca (Maltiverse) · Generic Malware (Hybrid-Analysis)

e252a54e441ea88aafa694259386afd002153481af25a5b7b2df46d17ac53fcc Sample

modified 2025-10-22 00:10:46
Electrum (Maltiverse) · Earth Lusca (Maltiverse)

c78767cb268589c7e3519f8643c7d7bc891ee3e8f8660f9340419af278ade263.exe Sample

modified 2025-07-12 19:25:01
Electrum (Maltiverse) · Spyware (VM-Ray) · Earth Lusca (Maltiverse)

e54a6551dd6e290cbe53d9ceda9e6d2bf36c1010ee939f3192c97de6b5a2650c.exe Sample

modified 2025-02-14 02:13:11
Electrum (Maltiverse) · Spyware (VM-Ray) · Earth Lusca (Maltiverse)

dde04eaac96964e86b8734f67f3b6741505fdc5e177dd58e85da12a8120a44bf Sample

modified 2023-08-20 21:20:27
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

c35b8514e3b2649e17c13fd9dc4796dbc52e38e054d518556c82e6df38ca4c1b Sample

modified 2023-08-20 21:20:27
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

953e3ed35d84c4a7c4a599f65b2fbd6475b474e9b4bf85581255f1d81d2b5e4e Sample

modified 2023-08-20 21:20:26
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

8b5e918595c27db3bcafd59a86045605837bc5843c938039852218d72cf2c253 Sample

modified 2023-08-20 21:20:26
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

c1feef03663a9aa920a9ab4eb2ab7adadb3f2a60db23a90e5fe9b949d4ec22b6 Sample

modified 2023-08-20 21:20:26
Calypso (Maltiverse) · Earth Lusca (Maltiverse)

Dark.exe Sample

modified 2023-03-03 14:34:15
Electrum (Maltiverse) · Injector (VM-Ray) · Earth Lusca (Maltiverse)

30c1f93a3d798bb18ef3439db0ada4e0059e1f6ddd5d860ec993393b31a62842 Sample

modified 2023-03-03 14:34:13
Electrum (Maltiverse) · Earth Lusca (Maltiverse)