Skip to main content

Ngioweb

Malware Family

155 indicators of compromise attributed to Ngioweb across abuse.ch threat intelligence feeds.

Domains

4

IPs

2

URLs

1

Hashes

148

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
imodobeness.atdomain
iruledolical.orgdomain
unibokosion.ccdomain
boymoder.ddns.netdomain
34.27.195.76ip
145.249.115.184ip
http://118.145.196.225:800/url
25756bd4d6028d9402d02e00f7ac00bf2b23c64e420efa4be01cd965c0594b9bhash
966770e3938bb350119a960948a15421d9c6e0944c4d49f5aa631d3bd9fee703hash
4d4063b8e2d83552d5fb51987e0f78430a4b32a5ec668c978e794f63e19feb7bhash
119031d11c894b585fd88084898929a892beb5b9df57e56b779d8aaa3dae9ba6hash
7b43d80550bca89fecb7ae2fb40c74fa308216400491e0ad84dcacc2b2e166b2hash
37b704598f9f9508047a8af72b891e20dc297c9b8cdce079fdf7112131d1c7abhash
9008c6360192925325f2e57c29d6593015b5a3ca8dc7a81ad28f513f4436a4f3hash
75b40e9fdcf3547bc3951f453c77f876272e1cd1e5e148ca2d2e9455c29ffd0fhash
6a9a2fd72c6dd58658f09a6743885605c77be428948c72d6a4539e3982e67418hash
5ad2c36030bf6026b813d500a16f9c54b56d70933f6600428cbd19b8e69119fehash
d9d4e27113ce25b3ad29418df0f44cbae34224e07573e5be2d608d455cafea10hash
5917de688b6ca269a40d77fd2a654a3e473155a75c93a4b15f7113b72ba7123chash
168459b80ce510a16c6c7f3a2e5b90bfa967d4c7c041c50cf1e326ea7e9b0d34hash
20512ad174c3bd5d8690de6ba7c6c5da287e0661698197d3e4182e7fed764194hash
db5a73ec59f3e2679b91676e2c7b537082bfae54a1f206543c5a3175b06e2768hash
6563b04cdd56bed19a23dfcea06759a463906d46a148ac837f4e6aa759d37779hash
d5d55e7f8c5a14d64661d27688ec481c415ef6a8aad73ec4b911403d30d83d7dhash
f423bf3c71770f069ab5d6bd0109c000c0f97234ee6a8d543d769d195e18ddafhash
9391c6ad17aced1142607c0c623b18d86a7697cc483d204ffac94093e26b8068hash
44202555c38860d1d6195e3f763d68e6b003e1e181622bd8e25ba6fac35e9549hash

Another file to check? Run a file hash reputation check.