Skip to main content

GhostSocks

Malware Family

74 indicators of compromise attributed to GhostSocks across abuse.ch threat intelligence feeds.

Domains

0

IPs

25

URLs

0

Hashes

49

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
120.236.26.126ip
115.52.150.76ip
117.149.139.41ip
147.45.197.92ip
144.31.204.136ip
64.188.70.194ip
77.110.117.204ip
84.201.4.120ip
172.245.112.202ip
193.23.211.29ip
77.239.120.249ip
93.185.159.90ip
77.110.117.211ip
144.31.139.203ip
144.31.139.201ip
144.31.204.145ip
77.110.117.174ip
194.28.225.230ip
64.188.104.35ip
77.110.117.201ip
c6ff68ba83e84a873c8d3abbffac433501e3378ac09950d5cba13e451e101064hash
ae30011a881c87422a71270983e8e107cd8bde23f335eeed75995901ca4f0cfbhash
c0ae241d60442044c232ea27a9af959eef19fde8f6bc0a11de44b87e56c697cahash
59312a8d6663c9a404d0b5aa96b70be3946592e5c5489366e04114b11a722fa1hash
ea9389463bfd678e43de2eb0d559f679c41a245884b7d9bc3acb493795b15ac7hash
3893c530c33100f70cd316096593689b556afd9d0faad7ef2781621aafc16511hash
e6b06841b777b3c9184f2bedf357e16b0a19414c9d85089010e271797c48ddb8hash
b1bb7b501a17e261becfea6938a4e3fad559210b10f8913ac49ed04439da7a62hash
e07502d5cf92239ccc44b3a98b1ce5e7d783521093e08e88e803cf2fdd67aa3bhash
400b9a2732d43e6892646779393aca039b872deeecd4c73a157237b235389575hash
8bcf2cabebf87a922bb0615f2e607e527fb98580f142416c9220a32a46b9cf23hash
35b81ff95ed6bb5e6db62d351e74b27448c032c64b443b85b90cfa34dd0289f7hash
f9716135b3eb5b91e697cb02fda30a5c1d0de0867382d9f5b99ac576d9bacf48hash
d823f83f718b3b796d400c98e979776d05a81d99ae67603312eb17a1f627648dhash
50a606e258eabb822fe0b64ce17d91fcc17b1f4465aa874c2f3f1ff51fb3a956hash
c3c657fa980e2ddcd6fc94d3464fea9816a4d5803c6ec80dee6a8b11fed28d36hash
b2342ad096728fbc2444464763b2d4f895183a4df54ee208776571483e78892ehash
d61eadd78e536a16de03e19831559acf48bec5c2ff390a2c82e46d5f30656225hash
e8d01743ce0ffa61150865297b135b597e96858b00853ec80ae47ee8771e3f0bhash
9195c2f38b5942ec45f56b6a236e73f315da51ad2353e98c44fa9b6fff2f9c29hash

Another file to check? Run a file hash reputation check.