Skip to main content

Amadey

Malware Family

12 037 indicators of compromise attributed to Amadey across abuse.ch threat intelligence feeds.

Domains

8

IPs

11

URLs

62

Hashes

11 956

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (8)IPs (11)URLs (62)Hashes (11 956)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
uybwveyvyt62rc.sitedomain
zsv2c62243.spacedomain
spasopro.atdomain
adeyqa.netdomain
windowsedgeupdater.comdomain
blindbut.icudomain
shohetrc.comdomain
feralhendown.xyzdomain
91.92.242.236ip
37.1.213.59ip
47.236.116.9ip
66.94.119.99ip
89.124.78.101ip
176.65.144.60ip
158.94.210.91ip
89.45.6.18ip
193.143.1.16ip
185.215.113.43ip
193.178.158.107ip
http://196.251.107.248/kont2rt/index.phpurl
http://jazoopsloo.info/k92lsA3dpb/index.phpurl
http://192.162.199.186/aB7xTy2N/mAjOR.phpurl
http://66.94.119.99/Lsge63sd3/index.phpurl
http://o7labs.top/visual/skins/index.phpurl
http://176.65.144.60/Psd8eZaW/Login.phpurl
http://62.60.226.159/Psd8eZaW/Login.phpurl
http://62.60.226.159/Psd8eZaW/index.phpurl
https://77.91.97.162/g93kdwj3s/index.phpurl
http://158.94.210.91/g8hrS4f4vh/Login.phpurl
https://112.133.215.23/mylibrary/index.phpurl
http://89.45.6.18/oPvjr94jfe/index.phpurl
http://tve-mail.com/forum/index.phpurl
http://support.office365excel.xyz/bfSgd3f/index.phpurl
http://support.avs4soft.comurl
http://158.94.208.6/h8jfdmdWS/index.phpurl
http://shohetrc.com/forum/index.phpurl
http://185.174.137.152/jb9sZZZbv7/index.phpurl
http://185.215.113.206/k8FppT/index.phpurl
http://194.102.105.70/8jdjZhdf7/index.phpurl
021ef57098c4a0e990349db7fe90377ea59a1579930e0931ae5a148345295198hash
4098768512e0290686ce227b5f60f597b47467cc5dff2f06651d4a7c0a80caa2hash
028d19edbe41199e7030ece5b6d4041061b3a844d8744d715fe9c1f23503b790hash
15b34eddf9c6bb59c78573968b97363cee4287d864c6e7b0af60ce4a3eb702eahash
db29099d060b9ed6c0959e6b13a4b35c6b0893fd1870805c77f05ab6e57eedf2hash
4c8023b966f55f620b22b5fe57289dddd80a5e0bf27306ae079d47128d32a173hash
11f659ce3f3ddebf4e58839c88d5784bc9b8929f8e0afbcf6cdda0521b1d4252hash
3d16e392fa1bc80d36687c28ee2a1ca81283e8c0d8da703c17fc8a8703a0e9f9hash
2ca99bbcfab544860c661e62e419ebfdfc7375a16d4f4d359743ef11f36b0a8ahash
a6d9cf95d5f2313286435fa4a0c06454600f2d62b6948c027454b68bcead1912hash
6531b801cc6cbf4139616803f9d43e9b886eed6c9ca82b86bb9c461c50f673a0hash
0e8c78e46f8b120bcb95daa91c38ff72e7c5e32c86265704f29c37218cc189abhash
5dfc3245d7c6b13d9cae4a439731d4c1eaad5775e58aaaa9382c95baa750779chash
4111f3f1e3069847a42a520e461781770c6cda6e462086b9190e8a6bc0f5d31ahash
2fbf7eee142143a7e7dc36c187da980e41d7bc1d77375fd16287173914eb3ab8hash
9f46496d50d76c60965ac38dd159caf91c1e74e2ef7d3e8b3f8d2d2a355ec19ahash
4b1b495771ba67ec68b0bc9d70e7ff2e21e5b9b2f5e742723a0b914475a4f032hash
b8d21ee6c0ac5d4ff963886913ab37a4a83600d20a6c9273b75c196739fb5f3dhash
40de86101bdbae3707b1ad9fb963d9f257607201080c95e006135dbf1f2aead2hash
64dafa5881bcefa4d85bab0264afdaaa21eab1efe27980485d6297432deb74e8hash

Another file to check? Run a file hash reputation check.