Coruna

Name: Coruna indicators of compromise
Creator: isMalicious
Keywords: Coruna, malware, IOC, payload, payload_delivery

Malware Family

58 indicators of compromise attributed to Coruna across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

URLs (12)Hashes (46)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

payloadPayload Delivery

Sample indicators

Indicator	Type
https://www.amazonawsapirds.com/b99744096a325e6726856364a6a05eb7b5727f20.js	url
https://www.amazonawsapirds.com/03fdc4d41b99943685ce6da11b178573717d0bc8.js	url
https://www.amazonawsapirds.com/2f870ab288a59e71f449735fa126e71d38825d5e.js	url
https://www.amazonawsapirds.com/68c279aa488ab8da27c5925e08d1170693b92729.js	url
https://www.amazonawsapirds.com/c2dc9ff745629af5fcd829e5077170f59ac38826.js	url
https://www.amazonawsapirds.com/0e0f11c859363b87e7a134df85502ca05a7041a2.js	url
https://www.amazonawsapirds.com/2e621e2dc5051b2596fe36a21804bb8f2c7e698f.js	url
https://www.amazonawsapirds.com/e5a266f2e46e7f8fc6fe64da918d49224a2f8297.js	url
https://www.amazonawsapirds.com/58a69b9b9c205320ef3194041ee92aeee4f482b8.js	url
https://www.amazonawsapirds.com/04d7afd7f79ad0131b7b1d0be121f3380a541843.js	url
https://www.amazonawsapirds.com/303ea491b92e7d4d0adee18ddf5a5ab5c2ccd1de.js	url
https://www.amazonawsapirds.com/496041705bdc90ceee1b4ea254b208261e89075b.html	url
a59c243fff84214cd84d176348e64449b4660b7c29fe75277b63d10d70a656a7	hash
c29966b4b4ffe0abf98da6c863b295cbfcccfd933c850980367c022e43aea421	hash
7ed8bb73e85b210ebf8017f86785bc221688ace4321204c3b93856c5a99bf078	hash
905b2b3bcd86200c62c4e9aa2b19706da6d437ac208fed930f7ea5d48cd8ab13	hash
7589b0489113b4b4a8a923fea0389fd20541fcf1f15000670772a2d2be839a41	hash
6fa04c0790b169831ec807538d85a9d1141eeb0d76538f3d851b41342656cdc3	hash
9944de246a9776135ca42cb6e37a969085cba5068768e0611be2f49e14516503	hash
36110d8ec6a728b44e38561e786dce4f836d7df7ef8a689624a026003299ea70	hash
13cf1829901c393d6c66895b9ca079e6faf57cb105504e6294a9f826d953f0f0	hash
1aa42dd84bf0e6af5d1fadaa1be524a1668d0836e535baaaa9dd5bd3159d7750	hash
36b80fa0b2516d2f99d7c5c78893558673716a0309ccc10185098d1ef0c1ed97	hash
c3b2fcc012ea5c9248516f2121a70f12e07d89bab938798af830927e65c900f4	hash
76543b25a61663d67a5bde5c4c4b9959994364b6873d769b1a5361bfbc37645a	hash
e1853eeff058387e9d3fa5cfc066819db47b8fd5400d14e9ce98c1f7059eb0d3	hash
8d79af1f75949983272d28f68e6c2d36d29737de37c33355b82ec04c8a34ab43	hash
5ad7178fa158281237cbf900791f59e8bf7291e28b4cc48fc10bbcd917750e19	hash
52eb0372fe3bb064eff24590fc5cfc4e76c5f28c9f247033e7b39d3344535db8	hash
c06c0333ad9a9fd43a077357ca43552b55883f66269e52d14402e464371229da	hash
170515dc93120111760cc8c9e1deefb9a81939d123749d15f13ad5eca55042da	hash
aa3934340337aaceee150fd8e2acaa5b5da71a59161585594e53d0477d9d87c6	hash

Another file to check? Run a file hash reputation check.