KongTuke

Malware Family

1 014 indicators of compromise attributed to KongTuke across abuse.ch threat intelligence feeds.

Domains

343

IPs

URLs

257

Hashes

395

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Botnet C&CpayloadPayload Delivery

Indicator	Type
conareras.study	domain
pmmoldpro.com	domain
uystv0cgviuwn3q.top	domain
anguiano.study	domain
gerlace.com	domain
amadadopai.com.br	domain
0cxwintaip6z6gl.top	domain
ud6i76t3myjmzqc.top	domain
c6yvmpf6utu5il2.top	domain
www.zfederal.com	domain
3ku2cy87gqif9je.top	domain
swewart.sbs	domain
loureiru.lol	domain
q59cdvf7px87wnj.top	domain
espossto.lol	domain
libretto.awebi-lab.com	domain
u8x7zwdx3q9x2sr.top	domain
yelahaye.surf	domain
meharsons.com	domain
riihard.top	domain
162.33.179.231	ip
64.95.13.85	ip
64.95.10.37	ip
64.95.13.15	ip
67.217.228.3	ip
64.95.12.251	ip
198.13.159.44	ip
64.95.11.22	ip
45.61.136.185	ip
103.228.54.23	ip
45.61.136.91	ip
64.95.10.178	ip
149.248.78.193	ip
193.149.189.139	ip
195.85.114.50	ip
64.95.11.59	ip
202.87.221.10	ip
64.94.84.182	ip
143.110.220.20	ip
https://schamserger.top/api/v1/status	url
https://olovier.lol/file.js	url
https://gerlace.com/api/v1/f659473	url
http://uycuyqarnyq16an.top/1.php	url
https://dialectum.com/c	url
https://zgsjyxzx.com/g	url
https://saaverra.sbs/api/v1/status	url
https://mathiuu.surf/api/v1/verify	url
https://guiglen.sbs/api/v1/status	url
https://dialectum.com/g	url
https://appkey5484.com/b	url
https://aatthews.cfd/api/v1/verify	url
https://saxonfield.org/file.js	url
https://roeerts.cfd/api/v1/session	url
https://oakington.org/g	url
https://bechteltr.lol/api/v1/verify	url
https://49xb5hoiqsr.com/dl/agent.bat?tk=5c6782c32ce7b4b8442c60f9afc95a39	url
https://luthel.com/c?tk=	url
https://stevsns.lol/api/v1/session	url
https://arernathy.sbs/api/v1/status	url
6623447a0e6e599c2a67ddce4c7b7255947a55d812ca57e3b0ca6f89b3d8b5fa	hash

Another file to check? Run a file hash reputation check.