Skip to main content

CountLoader

Malware Family

373 indicators of compromise attributed to CountLoader across abuse.ch threat intelligence feeds.

Domains

62

IPs

10

URLs

2

Hashes

299

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CPayload Delivery

Sample indicators

IndicatorType
twit-follow.vgdomain
vdsina.vgdomain
ultahost.gldomain
maloneyr.cyoudomain
balvlqts.cyoudomain
windows-telemetry.ccdomain
rostov-uga.comdomain
alpha-centavr.ccdomain
vless-proto.ccdomain
ros-tele.comdomain
webdrive-select.vgdomain
captcha-verification.ccdomain
fileshare.vgdomain
geo-foundation.vgdomain
py-installer.ccdomain
s3-python.ccdomain
updateservice1-telegramweb.comdomain
web3-walletnotify.ccdomain
bigbrainsholdings.comdomain
magnusworkspace.comdomain
134.122.38.224ip
104.248.198.130ip
31.57.118.10ip
176.65.132.185ip
217.156.66.151ip
94.26.106.134ip
85.121.148.13ip
37.221.66.207ip
31.56.176.201ip
194.76.226.162ip
https://windows-telemetry.cc/api/submiturl
https://msgrouppolicy.vg/url
40b6cedf9773ef833ff7337da0e1735cf171ab670d0190d1f4b7dcdc75ac509ahash
089588cb26b5276e3b8234354b940846056917a0aa49283f05abe8cfb246df99hash
0c9cc0af98a690ea495eb9726ba716b9d22ca1ae35749f359a4d10f41890167fhash
bf3e52b9f053f41e8d108f29f3f813301b420a5c1e7654f72a0eac4af76b91bdhash
a8da9a22104fa3fba6179ea4b96fe4cb9eeafe4a3796e59af53cb4380275f3e2hash
a5ae6e16849e3c3a40d9687059f9f0caa2f69f29a42007397c8ba82528b2255fhash
1cd4ea346d5f0a43c5f5934fe07a0cea3a6c6ddc447ee267ea7f6e2bc64763c0hash
968a2eea5410179d80bc792a42b180ac97f0c34323ce6f43c435bfaa72b31dbahash
26dddc0a4215e4b47eb8180eae48627e5278c0897c9bd44018adeeb2532af003hash
62c958b8b8e2d237cd0bed956507859148ae0befb33e60650aaf90edd0fb6c73hash
b9b218f2b10597c80d6888f3af904694d58c030b193d5a8feee077438811508dhash
ff100a7e7784df48b0078687ed9cd32da7a4329e9f7777f47a1e0a6011b18f27hash
6426a945dcc0fad558177a7dc43c64b88aeda014fa35a17924f026d95d5d1c97hash
a54bc8b924efa6160814d0d2cca4b33204709e1b9d64f57362ca30c9c1e17c9bhash
8f8e3dbbdab719fad3f6748bde5301b9b3e35aea0ba58407a8e785bcfc6e9f14hash
9b7c3ef4bc32a08b8bf454450350bf161c42c259f69c4bdb347e9ee6659d749dhash
a9ce65ddd0d2f90efea81542a916e8ceb8f9980f76e0033bf048263b2c94ec7chash
46e66c003733646893be95c432d318eb436bbb66a4588275b2e777919d8a0668hash
13d6ed38714c68446cc9efd2c7806cf50429ee06171702a80633cd67c62d9ab5hash
f835a5b2a0f9ade164909a8a4d6c4e84f81a9afa87a2b305bd494e0739359783hash

Another file to check? Run a file hash reputation check.