Skip to main content

PureLogs Stealer

Malware Family

100 indicators of compromise attributed to PureLogs Stealer across abuse.ch threat intelligence feeds.

Domains

14

IPs

68

URLs

8

Hashes

10

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
logs.bestshoppingday.comdomain
voucher-01-static.comdomain
relay-01-static.comdomain
relay-02-static.comdomain
strang-02-static.comdomain
adobeartsia.comdomain
boltiviersoul.comdomain
benbeloorg.duckdns.orgdomain
office-rechnung.topdomain
small-morning-8be0.fsocietyandtools.workers.devdomain
office-rechnung.lifedomain
rechnung-lexware.topdomain
office-rechnung.icudomain
webdot.ddns.netdomain
216.250.249.188ip
87.120.104.144ip
23.146.240.36ip
107.174.142.91ip
204.44.93.88ip
5.101.84.75ip
5.101.84.18ip
173.231.53.193ip
38.49.208.47ip
216.250.251.226ip
172.81.130.198ip
155.94.163.11ip
5.101.84.150ip
2.27.62.123ip
176.65.144.84ip
172.93.167.12ip
198.135.50.152ip
64.89.161.190ip
89.106.83.137ip
31.77.109.87ip
https://weedhack.xyz/files/jar/Pjibf.exeurl
https://pullout.ezgateway.net:587/discordurl
https://pullout.ezgateway.net:587/filesearch/requrl
https://pullout.ezgateway.net:587/finishurl
https://pullout.ezgateway.net:587/pluginurl
https://pullout.ezgateway.net:587/userinfourl
https://pullout.ezgateway.net:587/browserurl
https://pullout.ezgateway.net:587/pingurl
2772367ba92f56742707532f951856c2525f31c8ca0a92412e957774b7c90e21hash
90bbefd7f59df783c656d143564b4f7b8a7fc7d76517325127d1b3f5a51b757bhash
9fb63f6266dfbc7b3cb527d19134c13f51c2c3080c5242756296f2a7a090a200hash
ca33eeabb9860584f49ff9a881de1fc6a218813d7bfbcbeae842fcb579ea482chash
d94a6d8e3d54432fcdb888a4f1e566f35c9ea8fc04381956f5e836da50390ee8hash
5963a9491c91eae44384e239284fdc74dc3db9ee1b13c24eccc516ece350df34hash
5f8849d726446a436c7d56709246a2981039840a8222b362ff6ad3c55df2f878hash
b51bc344759f9b9db3321ab0c07dc807b63bcc8d9ec028443e95eca5292ff5d0hash
32ead15908ca61088701ec6ee4c692658585746bafb52cce23c047d035fc91a5hash
ae5a7b4d6ac001e41a49833ea03abba64f33d49ea46d3e4875d18331c52eb6a8hash

Another file to check? Run a file hash reputation check.