Skip to main content

SnappyClient

Malware Family

150 indicators of compromise attributed to SnappyClient across abuse.ch threat intelligence feeds.

Domains

16

IPs

30

URLs

3

Hashes

101

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
yoda-duct.xyzdomain
revteoaraenttf.comdomain
grand-world-tour.comdomain
yoda-time.inkdomain
dreamlinestream.comdomain
yodagoodie.shopdomain
mdprzinwo.xyzdomain
yoda.nepaltathya.comdomain
ux.strainedeasily.icudomain
ohn.stainedunstitch.workdomain
ootid.srv-auth-dlt-msh.in.netdomain
sash.thirstyschnapps.cfddomain
gor-trendz.inkdomain
sunshinedreamuk.comdomain
leebin101.comdomain
hersosi228.comdomain
109.107.168.197ip
176.53.159.222ip
95.179.189.194ip
190.211.252.42ip
194.33.61.154ip
109.172.94.79ip
91.92.240.107ip
138.124.186.2ip
212.34.155.18ip
45.150.66.187ip
178.104.222.124ip
91.199.163.124ip
87.121.79.21ip
179.43.159.106ip
178.16.55.142ip
185.196.11.63ip
66.90.86.58ip
94.154.32.112ip
195.177.94.94ip
178.16.52.217ip
https://leebin101.com/url
https://leebin101.com/rurl
https://leebin101.com/g.phpurl
9d86ff6676fc5cb678c49c07ea88731b7016710b5a9666882042cbce1e3c51f2hash
f3d69fda955e715bb7ebc418db1e8a21bc5a8e05f38beb879c55087c7e21efb2hash
1863c944ff0f5f06cafe0f98d6a6f54084ac266936c0dbc16a9d13ab03dda421hash
0b8423be8dc7d6eaacafdf0f15fe7e901f8c32c628837f0dc18cb1310e4f03a2hash
dc1f4028d7cf5a6791f6d9957cd4c64791400cf3a9887302231eaa9762806dcfhash
a1c18d5121b7cf9be0c84f6c75d4d82cdcf9166043c71cc710e8653a51cf3a45hash
d7f6d22c05867264f359b31ca29af8e20e0859a0d2d10a0114278b67a69f1140hash
082c873061fdb6a9a7e94f24631b2b9aa8fcc5efa6005ccab81497c84d9002edhash
d0d91ff020800f60ddb2cbded3c79fb9de0fc261e4468fa2a7d283985470bc68hash
3117ee3f64f78f3ca8de5d5299947ca34e2f2fb8302627b1dc8f7ac23b046fc1hash
ce3575f1d6e6202543cf5983b57c9d1f1d63b9b9d821ea102f85e9b57856e7ddhash
9980462da93da1eac2f57119df0e7b94bc0552179c2353748886ba43dc37467dhash
e72c98fa431036bbc76060a01631c68db349efeebfe566e08f5e9d3cb163ffc5hash
7cdd492f8bf92e342c2671c79baf274dhash
1467f5f92f91eb363cfaf1c902ffb0a2hash
677d3e43a0ee2b00841b8e6eacb4f2b3hash
21fde5c60081a59f7e3fd62bfc17d568hash
e729ad151614c96d872320b40e2f2ad2hash
72b4cbacd5e0f967cda3a9adfd04a136hash
08fee80c1770ede8ea5f202682ed18e11de5c77721d4d9d0d56261e1020d5f7ahash

Another file to check? Run a file hash reputation check.