Skip to main content

Glupteba

Malware Family

577 indicators of compromise attributed to Glupteba across abuse.ch threat intelligence feeds.

Domains

21

IPs

0

URLs

2

Hashes

554

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
server4.sofolisk.comdomain
server5.fulusus.comdomain
server5.sofolisk.comdomain
server6.fulusus.comdomain
server6.sofolisk.comdomain
server7.fulusus.comdomain
server7.sofolisk.comdomain
server8.fulusus.comdomain
server8.sofolisk.comdomain
server9.sofolisk.comdomain
fulusus.comdomain
server1.fulusus.comdomain
server1.sofolisk.comdomain
server10.fulusus.comdomain
server10.sofolisk.comdomain
server2.fulusus.comdomain
server2.sofolisk.comdomain
server3.fulusus.comdomain
server3.sofolisk.comdomain
server4.fulusus.comdomain
https://fulusus.com/api/install-failureurl
https://sofolisk.comurl
68d83afa2dc4272e54c4ebb1ab8981e7f00442dfe6e66c8b7299c30a230be997hash
59a142c587acfabfd84a5b123438414e6d1ba45d47fe21fddbbef9708f6c58b7hash
79123c765ff9f7d116bbf4bd64a52c2bc33195a1287666ea379d89a5eaf0ec40hash
47708d669b31f626c8e3f1ad6c124da9601e2a2a5ad9bc3865038f985c89c696hash
92532133195f37037f6697a032a5188a6a0c881aa5b6d5a85571d4dcf37e3b93hash
325f216d2297ca37dcbd050e3a9c34229e47f5dce30f7f6442d4b20ff7940f5bhash
cb7f2ad042f2394d1413ce9e67fce75b3ec07af8a9dcd8105295ab56cc6ccc6fhash
62229571838a96cd9085afb2ab3db0079e6b77db3737f14af016b81e9e8ca96dhash
f421b369da1548568f6d2edc332073ef7604517e83eb1425f9b336eb56e6ce7ahash
79fb1d00ef9d85e958a17fd331b23dec507e4f2e2c150fd580d0668b84d29d00hash
d571dbe3249950ebc2a8b600b9e3dcac5fa2393b84983709995df071d7f9a2behash
2b3fbb77e5ed29f7ffbcb9a73cc1e467aed6447fcaf28a47d50f78c81fa17eafhash
0418952a347d2d4b40055f197622fb0fd87ac782477cfd354ee030cbe8c56844hash
e498809a30cab90e8d5eb3ff4610bc177ea9e63110530da50643332263f4ab55hash
3ed60a60c3aeb99f383ef97de1581827c535d082cf9f33c5fe6ef572fc186a94hash
52a39ad858c97ff0fd70f58eb0efbd6bd41e27f19872cd585370e5e2583c2a78hash
b503aee98c27d8e15feb765addc1c386c7c59ccbd43ae7c4d2842b293120130bhash
5032244863d62238e00af2c69bf254fdb384fadb00972450472f66ddf00b5288hash
cdd97a4a8f04c6241bc2bc9fed6b43dfc4b08b8d96ffa91688df52c3f0b489a6hash
0ab024b0da0436fddc99679a74a26fdcd9851eb00e88ff2998f001ccd0c9016fhash

Another file to check? Run a file hash reputation check.