Skip to main content

Hades

Malware Family

54 indicators of compromise attributed to Hades across abuse.ch threat intelligence feeds.

Domains

32

IPs

0

URLs

8

Hashes

14

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
ld2ombme.sametcanaltindal.onlinedomain
n66klrdz.sametcanaltindal.onlinedomain
8g05rgqx.sametcanaltindal.onlinedomain
c18uskdb.sametcanaltindal.onlinedomain
1p7lhbac.sametcanaltindal.onlinedomain
88twg8ug.sametcanaltindal.onlinedomain
rdrkohnj.sametcanaltindal.onlinedomain
sooj4mj8.sametcanaltindal.onlinedomain
hde760qe.sametcanaltindal.onlinedomain
88vx07b2.sametcanaltindal.onlinedomain
2pjcqtpo.sametcanaltindal.onlinedomain
so6tzwnz.sametcanaltindal.onlinedomain
wl8ee0nz.sametcanaltindal.onlinedomain
2anyhb8i.sametcanaltindal.onlinedomain
j75dg096.sametcanaltindal.onlinedomain
api.sametcanaltindal.onlinedomain
ax8ayl1guumv.hellodcuser.comdomain
kw0lwdvgqq1e.hellodcuser.comdomain
togethers.tvdomain
roz3b4iqyrt6.wiestonunanasikasar.windomain
https://roz3b4iqyrt6.wiestonunanasikasar.win/api/v1/discord/clients/registerurl
https://roz3b4iqyrt6.wiestonunanasikasar.win/api/v1/anti-vm/reporturl
https://hpbq8h0d8ic7.hellodcuser.comurl
https://roz3b4iqyrt6.wiestonunanasikasar.win/api/v1/discord/friends/reporturl
https://roz3b4iqyrt6.wiestonunanasikasar.win/api/v1/capture/submiturl
https://roz3b4iqyrt6.wiestonunanasikasar.win/api/v1/exfiltrations/submiturl
https://roz3b4iqyrt6.wiestonunanasikasar.win/api/v1/discord/tokens/reporturl
https://roz3b4iqyrt6.wiestonunanasikasar.win/api/v1/passwords/reporturl
fbb3316fa6994fd3c19dd45b98ffa5ff2c6249c08fcd832fa912bc305dcd8ffchash
5eea7bdaad184396c6fc37909eaca623d79aa960b4e06078bdcbe0e904685a9dhash
34651af99f5f8d4334fe37e2c7989e06hash
5b5434cc8bb3556075c6967d2ffee5a6b33793de07b9d4701bc63d369de63861hash
7c0f669cd06e5ba8fdcdba107b9519fe73519368hash
c95ffa015198284a4bc23fc454a097a7a91f2ed2hash
8876382b1cbf3e14ae2d4cd90a94b797hash
b4ff59be95361d56347d381ffa917a5e583937b5c854b243e466d9d8f5bc2990hash
b187436ea67d18d950a1aef584096c2fa52d2e6ae219a47a64697d5491525c82hash
0fc4a52a5952152a331688b652e252ef68d7a9efe2dab744915623df70d7f0echash
5cc4ebf5d0932210a5f7cf5728a3cc61cd8255a4adc026d5ed386d98badde7a3hash
850e9a04d7b41ea503c82351f9a0bb729cbc2dd8e361da6ca9c90b4f39d8405chash
ea310cc4fd4e8669e014ff417286da5edf2d3bef20abfb0a4f4951afe260d33dhash
0dfcf4d5f66310de87c2e422d7804e66279fe3e3cd6a27723225aecf214e9b00hash

Another file to check? Run a file hash reputation check.