SalatStealer

Malware Family

1 688 indicators of compromise attributed to SalatStealer across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

1 672

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (2)IPs (6)URLs (8)Hashes (1 672)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

Indicator	Type
sa1atik.cn	domain
foenfispopka.live	domain
193.221.200.26	ip
2.59.219.233	ip
185.213.240.179	ip
85.198.98.75	ip
176.12.71.122	ip
185.166.155.142	ip
https://webrat.org/login/	url
https://salator.es/sa1at/s	url
https://wrat.in/sa1at/programfiles(x86)eprocessor_revision	url
https://websalat.top/sa1at/	url
https://webrat.top/login/	url
http://185.177.239.241:5001/renas.exe	url
https://rmp.computer/123.exe	url
https://oopz.surf/upd.exe	url
a33c4b67a7f6845f04ea10097df763d8f7b8a2040fe479564855c4fe2f3cc62a	hash
69decd7906f215fb3f05f332fd6293715adf9ae7b0e88ff0bed77428a64e7b22	hash
d85719ac7660672f42f6fb44a198998162c148c78d41c427b836a133c790198b	hash
22b600da8702a9b067f76048f48181d49dca2a54b96c9dd6609e7f3648be1a19	hash
b3b72b9e5843e3a3fcedbe4d5229de9364faa9aa5cb407fabddd364fbead27e4	hash
c35376b13d938eb932192bfb57d38d6ae9384f070fb5ab4968ed75e3802551a0	hash
30d9b5c56983375335bee44843115b393b7c711b	hash
2dab1463c97284de02f3abb10812c45eed5fe6b8	hash
1cb9a68770a0018a66d62e992b36f3fab2539f70266af33c733537088e8615e8	hash
484b2e2b39e55fd329904f521ca747cdabbd9cbf9b0609e4536b44bff537de3c	hash
c870be3e6eedbfe3c18bdbf0d6919b19108602ec84884bc959cb28e47588c8d5	hash
8fba9cdf3d86dba7aa10dc0e8965b0b7496ff08ba059658ef924509aa93c5703	hash
e3a5b8e3adb395bca58d008c96319acc9834dceded5db722bfb32fd816fc3872	hash
723906ac49e7f347bfa4c74456c0b43d12b3af7cdef1eb59c4bd9e432f496507	hash
352fed139c6838c4ccc695a26ccebfd5	hash
8efb10bafc3b2f12d043d60d4c9009ebcde06f7388d8cd8042271bfa2da4b9da	hash
b1a5fbabd5b4513f2adf199e2224c70ec4bb2e5c6e8e3fb794ac079ac1d9256d	hash
64094d982df3b5ff6274564ddd5526fabc17fd9d04885c943c34a2e53bdc367b	hash
b7e2d4427d63fe07eaf62cdb1fe9b242e9d8066387b4c1d8c1a381b0f13bbb4c	hash
c5b77d7de8423b4fbac74a07b36853359ca4f7f7c0d55c73ef5c76102c223abb	hash

Another file to check? Run a file hash reputation check.