Skip to main content

DarkComet

Malware Family

583 indicators of compromise attributed to DarkComet across abuse.ch threat intelligence feeds.

Domains

20

IPs

35

URLs

0

Hashes

528

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
f168hi.comdomain
services.in.netdomain
sunwinclub.eu.comdomain
gofent.za.comdomain
88aa.institutedomain
nox.de.comdomain
kvb.it.comdomain
cdo.it.comdomain
webms.it.comdomain
ksu0wokple.localto.netdomain
anonymous5007.duckdns.orgdomain
6cye4vtrgb.localto.netdomain
tjousypbf.localto.netdomain
lzuxhk56ep.localto.netdomain
zjnwtx0u79.localto.netdomain
changllinstocks.no-ip.bizdomain
mastercliente.ddns.netdomain
lubumbapetr.ddns.netdomain
anonymous5334.duckdns.orgdomain
tx4h1lbrn.localto.netdomain
132.243.172.182ip
189.150.86.165ip
170.244.195.143ip
189.150.106.61ip
207.189.23.198ip
86.109.75.132ip
151.247.193.128ip
105.100.163.183ip
189.150.132.33ip
206.166.251.249ip
189.150.109.130ip
79.100.84.2ip
165.227.151.68ip
91.93.183.19ip
209.25.143.17ip
189.150.83.81ip
43.251.72.254ip
88.247.35.166ip
88.231.147.247ip
87.243.97.168ip
3033e88038cf80d4ea502099291f9ea0e93c5995f96282ad26e5c21e8442c5cehash
e60c4be8e60b247c14021842a6543967b7ebd30992d12d634760ebf038773d6dhash
da0a4e16ef4baf46f27e666e9b4547cdf17eafad3caa235df6c29a52d3da8d0ahash
90d3dbe2c8ae46b970a865f597d091688e7c04c7886a1ec287e4b7a0f5e2fcf1hash
f75668dcd2d8c554bde126315253439858d2155588b1889473a7df5914537f10hash
52d5e596c1da82e5895bcd485a98989ff1b81ab3ee5baa13a41ff1c2808493ebhash
f461b17cf839f10db53155f207682533d99a056ee3a883ff7e0e6f5bc77f87c6hash
cf6bac13c5316f2577d4b1e5a6d349ce0cad51b7adef0569dfc891b79abbec95hash
7e5ee35cbbe65bf740654be40f4ac3c6c891073b96afb658eb1a42e4736618d2hash
cc08361af030e9b6a7e63ba6396030c15b6bb10e7690b27bdf9f279eae46106fhash
fd67a9e95f6d0b78948950ed2e73ea275c7c5155d0e04d39f3dfebf8659ae806hash
664b7a3c0a0f414b711f0b0f632669de0dac794fd029cb13f3b292717d3c7196hash
e0380fd96474eebdde85471abc553c688cef21db70120fb7352151ad58c954a2hash
f9b5b222b0911d095cdae3ae34c5c3f647ff0c08b40246fcabd3e7a03abcbb30hash
4ad0cac19bc9ebbdfc08c8440d4d5a7da007ddc252b15fc0c536476917bb6532hash
37f6015c7f1fe0422149a7d3695222e17c32d4506baab716a5d650a3b7315535hash
f52cc86d7cf14cdc0c501285f31418a702fb88fceb639e5c4b295f9d9bcadb29hash
9429ef640e67c9106bf05567d9a68b9600d2a78db68d95c86e38935639d70f4ahash
0a7662f030946b171a47ca964dace696410fbaafcc70c3849ea70fbcd3bacdf4hash
43b3fa1a455eedfc3a6084046a958b6a41074b92d94ecb5a0262911eab570f86hash

Another file to check? Run a file hash reputation check.