php.shin_webshell
Malware Family2 151 indicators of compromise attributed to php.shin_webshell across abuse.ch threat intelligence feeds.
Domains
2 151
IPs
0
URLs
0
Hashes
0
Download indicators
Indicator lists for this family. Free and anonymous downloads are a 10% sample.
Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.
Threat types
Botnet C&C
Sample indicators
| Indicator | Type |
|---|---|
| dixyfyqy.workers.dev | domain |
| y7m9sw9mvw.workers.dev | domain |
| ukcvl78288.workers.dev | domain |
| dyvagiba.workers.dev | domain |
| xojuzutu.workers.dev | domain |
| cepeniso.workers.dev | domain |
| wafebyne.workers.dev | domain |
| healthy47.workers.dev | domain |
| dlwrr54710.workers.dev | domain |
| cyrilipu.workers.dev | domain |
| pymela.workers.dev | domain |
| kohyhe.workers.dev | domain |
| lalaqovy.workers.dev | domain |
| jyjodu.workers.dev | domain |
| xazavo.workers.dev | domain |
| wkdcl47413.workers.dev | domain |
| ryqeza.workers.dev | domain |
| 9032terrible.workers.dev | domain |
| kekyhu.workers.dev | domain |
| tehifafo.workers.dev | domain |