DanaBot

Malware Family

1 425 indicators of compromise attributed to DanaBot across abuse.ch threat intelligence feeds.

Domains

IPs

110

URLs

Hashes

1 315

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

IPs (110)Hashes (1 315)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

Indicator	Type
109.227.40.60	ip
94.250.182.47	ip
109.227.57.186	ip
37.244.251.138	ip
77.237.97.58	ip
37.244.255.240	ip
44.211.251.197	ip
34.230.7.122	ip
109.227.59.160	ip
37.244.238.125	ip
142.11.206.50	ip
143.202.93.183	ip
109.227.48.165	ip
138.0.191.215	ip
37.244.231.39	ip
45.152.242.130	ip
156.252.92.138	ip
170.78.199.162	ip
198.1.241.78	ip
156.252.85.207	ip
2b92794e8da41b8ef61abad1197baf3bc398b3f1e369f07d021df6a1056828be	hash
8eaea98a33160ee9fda2bb5ff501b6b10e176cd07ec2bca44069711d3df55830	hash
1f984f06dd4dba858766fd2e8d81877e9738f8b9dc6706ce69b7b6e596c466d6	hash
051dfa313f36c762c3d135b7a75eef16099c54eb5ec8e19ad6e0684ee7c5db77	hash
a5bd1ac8e6458e40e63cf558145dbd06cc2700d97f9ed3ae5a161b165ca6c035	hash
66e12cf607f737464145d65eac50070d62982266c3ca8843142384765fec91bb	hash
1004871801b14f12607a70a94d8b4f67ec9deb0e437ba73d981eb00440762ace	hash
80df77a955cee810c6ae9547dcb0f1bf2da2df62ae6c00166b3c7e88a9299b87	hash
c252d146aa7c269b0db0a7c05f094da93234e6ace6ad52bd33860edd4127b6eb	hash
8004d45da037b7cf301d00832b731acc7e7290a70aa858f81eade63166323519	hash
20b4d989d117848bea18b1da3e0e7e27e890bdf54a84d17da331ceb657d8a08b	hash
5bf63fb0014e66cda124ae8d9a2275e8a1c98704e8885c4aadadf74fdb162920	hash
a8e8ac7c8c5e8260b41895070f809f4e817c936ad6877dbacf6f7f963abba250	hash
0f0681e9e6d6b67bbf1991810e504eb535c4acade6e018770371eca3b6ae24fd	hash
e582a8f9dbd02815392575c013d49189a30d4da0dd7e96bbdc339f8a2ebd7516	hash
09dc7dc14936ed8794d78cdb6eddc7f3776cba90b3942c2fa1ff7bdf329956cc	hash
5288d023c4a8127ed105f7d8b9142aab47dc505efc5b6a81e8c9367f0465c03a	hash
c4f95ceab398dee9fee6a253fc993e5b4688a0d5582641c873d4a974b9e1f48e	hash
43ab73f3b4ab13ac8b7b9f189e8a933f25e9644e9c2ecbacb9aca7c328fa108f	hash
295dfd4608b81ee276a04f1c58d806b7f906695e744cfe8234eca6360c555ca8	hash

Another file to check? Run a file hash reputation check.