Skip to main content

Amatera

Malware Family

66 indicators of compromise attributed to Amatera across abuse.ch threat intelligence feeds.

Domains

21

IPs

17

URLs

2

Hashes

26

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
prunarok.loldomain
wuserrosok.cfddomain
noabasteb.loldomain
violcuglu.cfddomain
frimwanbav.loldomain
kefaisce.cfddomain
feafetoboary.loldomain
wuscokosh.cfddomain
fleewakig.loldomain
voskuzapoud.cfddomain
spinbode.loldomain
nujusnex.cfddomain
freesilkirk.loldomain
loajituzio.loldomain
pingtrack.clickdomain
metrics.demobunfiber.topdomain
brightsidekosmaj.comdomain
luxaudio.com.audomain
tiecbuigia.vndomain
www.marionalberge.comdomain
141.98.234.25ip
46.149.73.60ip
46.149.77.24ip
77.91.96.205ip
91.84.104.126ip
46.149.73.57ip
193.221.201.134ip
89.124.80.216ip
46.149.73.219ip
89.124.82.121ip
144.124.235.102ip
91.84.126.69ip
77.238.228.60ip
185.121.235.118ip
192.109.200.63ip
195.2.93.115ip
194.164.34.182ip
http://192.109.200.63/reloadurl
http://192.109.200.63/regeventurl
d501ebd024fcdfa1fd7160b06511c240ae66c4726e12ac9133b855929932a0f0hash
65e85cf77162126eb7895dcf9858373bb307bb2c7b7b8ae8ab8d7935b78419c8hash
44b424b73d77827aee492d919fe5d4e9ce21c802a7f8ea32e45a620a706b0f15hash
6439ae266c4254e9916a365ba6a3cfa39b8193c4bd9034bd8249eda09a82ecddhash
47b04598800c3231e8dd3eae7d187a42b131f851584403be28f1f4364cf523fahash
575f0df983a4f3a513f9c27e157b8e3857a7727fd6bbcaca6614bec891712308hash
03d623bbb0ef63709e3cc299a146093f97d3a4ee1f46b2b55465b1304b372f7ehash
9e1b717c2329a99b5546b4ec68b8d88e45d7169c82c2ea104dbb4df0f071302bhash
20a28e86502819386445ea8a13359429c78e97eb064288f17c1914c2266eb964hash
570130baff465b9d23b4dab752fa3923c92a538116f1d161b760b89c4cfe835chash
56e3ac5f4be4a1ef51b87e1df3d940f7c8663e0f28842252790a422e29b6ad92hash
9866a8ecf5414283d89528597ef7ff590f60e42aa6fc4972f61a083c2b08c1echash
52c8f8a24b3316b92cb36c3eb9c0cc4467a000176c5208b5611ed092f05289d4hash
43bcda72704aee14064f179b07d855d0a866d0d364c13d941980c5700c9d68d3hash
b0209a56237964228cbd95cfe7ee4c639e20da8bfb01bc19e84e43cb3d832c01hash
c4a461b72c5bfa08d4bffa4d10d265d3777efeb4066566442b11220cd48b88c6hash
f31df9170d3d70c2e3a84e56f1dabe093f19c79013a4d741cda3697ab2a93eedhash
1819827e17f31e72d456158b6b9c90af25a65945f6f05d04a060da9f24179b25hash
279d04c0cfd700c8bcb9acbed528131d3ffef8e25d12713e8649772739aecb92hash
bd36f4c15fe0acb6748da5ed12e45dcc37d412385812c078d1e4f04730e9f69bhash

Another file to check? Run a file hash reputation check.