Astaroth

Malware Family

225 indicators of compromise attributed to Astaroth across abuse.ch threat intelligence feeds.

Domains

220

IPs

URLs

Hashes

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Botnet C&CpayloadPayload Delivery

Indicator	Type
scrotentanpor.contabilidadeonline.top	domain
prutentonsil.balancoexpress.sbs	domain
pripor623.openstern.yachts	domain
trulincol.velmoratrud.cfd	domain
treronbel.balancoexpress.sbs	domain
graconpinsil.terrae.rest	domain
staval45.contabilsmart.cloud	domain
prepinlancal.darsion.boats	domain
plomintil.openstern.yachts	domain
grugoncinnal.contabilsmart.cloud	domain
crisonsul.velmoratrud.cfd	domain
stazinal.terrae.rest	domain
trelinbenkil.terrae.rest	domain
sprusom.contabilidadeonline.top	domain
vadinminpaz.contabilfacil.sbs	domain
plemindor.contabilfacil.sbs	domain
trelannal.contabilfacil.sbs	domain
gruval.contabilidadeonline.top	domain
sprumanim.contabilsmart.cloud	domain
plepal240.contabilsmart.cloud	domain
https://vmi3554028.contaboserver.net/contador/2mNuEntity.php	url
47d2908c4dd7f6f5eb4a8ef4306077b10315c44231f4bacd2bb811b245561911	hash
a6044786991afdb9d42ceb350943987765a7d0e8537369b2092e3f019c0f63ca	hash
cc44782356cb0effc528a7ab22c19ab360a55ebbbe01feb0967031aa191c5869	hash
f62a958faf0491b2b2803be2ee69b664b58e4a1261f64e8530cdc1a3ff666aa4	hash

Another file to check? Run a file hash reputation check.