Skip to main content

RatonRAT

Malware Family

153 indicators of compromise attributed to RatonRAT across abuse.ch threat intelligence feeds.

Domains

4

IPs

38

URLs

0

Hashes

111

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
xyx.wvxx.dpdns.orgdomain
snapix.p7z.rudomain
sleekdra.rudomain
nitelume.shopdomain
143.14.44.170ip
158.174.50.97ip
85.137.253.157ip
80.76.49.78ip
31.76.118.128ip
151.242.63.30ip
144.31.148.103ip
64.89.160.222ip
45.151.91.20ip
89.125.120.77ip
87.58.204.146ip
23.160.168.174ip
36.50.135.229ip
198.244.201.139ip
143.47.53.106ip
194.31.223.177ip
170.205.31.216ip
87.120.187.0ip
163.5.210.250ip
84.98.112.243ip
71a05c0c6ef1cebbb631288ed051685f609e58cd0d202ea307a467b0aa9f8328hash
51ad4395011f9d4948841509fe0b55c2be732f8f405e2c85fc8c6df69922b619hash
005945a8e74e5d961d46014e3fd9129cbe213cac8de08423624c5d6fdc156614hash
27c46d58c8ba4920f24d2f09140d93473f9ec148dd7e44f3260951ae8b5b540ahash
7ff17ae0309f554a8569e55e283e9e1a19437174df959bb9cc8d90b19ebf800ahash
1b5b4a0561f9844f59e0b52069a5c3eb5977208a29cd25bddccff8ef8391dae5hash
9f21280ec273b0581cf6b2ff6ca6852d479c161b0d208691c8e6e401ee11b216hash
31786fcba1527c44ef0ba424f897958767f98b76274f563235d2fa9ea33c013fhash
4568061036e5b3f3a46a7365edf2fe58613a83e4a310e459ad68a3b774b9e72dhash
782f3fe871b7ba7150232151b488ae8ee347b82d8b7d02efeb949cf86d3007achash
b6a06f9799e05b4b4404a73f227da838ec9ba0e4cc6de376b04807897e55ddc6hash
e046e42cacd98843ba100cc9c6b52cf83bce5894d7e98b03373937b7db263333hash
4fbecfc9618c481a7ce291dd54179b997fc1ce6959fb6e0212cc696a6418a3c8hash
88d541eceb31d21c154521bf785d8647db4871d8c5d460d96cffaa6f4995ddd4hash
c7d57e221b4a2d6410c83b35d31d2d790dc5489dc82ec947807954f723d9a564hash
4ea16583fea8b113427a8ef69ffd8b40839cc6fa4e1332904465e0e83930dbd6hash
4acc911e1a9e5a306731a98f01ab2f28e5d8368d4ee2db60d37b89e9362b0425hash
4da90557bd724fee747a693df7fe07c2c6c6f7ed9a07a252ff498942d33c6343hash
9494c06be311366ce1eafccddbf38e2b925f7657de1918ca06b160dde72db99dhash
33fc7b3ffbbc54e5f542a3d4c0186ba5bd57dcd5266d58c070db57c27874a891hash

Another file to check? Run a file hash reputation check.