Skip to main content

NodeRAT

Malware Family

17 indicators of compromise attributed to NodeRAT across abuse.ch threat intelligence feeds.

Domains

12

IPs

4

URLs

0

Hashes

1

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (12)IPs (4)Hashes (1)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
freegaten.comdomain
freegaten.infodomain
solidclouaps.comdomain
sendertokencf.comdomain
sendtokenscf.comdomain
selerscope.comdomain
inversivaldcf.comdomain
vrfideyoidnty.comdomain
cfintegrity.comdomain
mnsm.us.comdomain
appistartes.comdomain
solidactivate.comdomain
185.122.187.55ip
193.222.99.231ip
185.112.59.64ip
144.31.158.33ip
84802194859b530dcb8e374b7970912f6a27ff5e97f2bec509e59b2dffcc6146hash

Another file to check? Run a file hash reputation check.