Skip to main content

SpyNote

Malware Family

442 indicators of compromise attributed to SpyNote across abuse.ch threat intelligence feeds.

Domains

7

IPs

13

URLs

58

Hashes

364

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (7)IPs (13)URLs (58)Hashes (364)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
edpisblackbro-54955.portmap.hostdomain
fdg.kozow.comdomain
fapennybdj.localto.netdomain
justin-subcategories.with.playit.plusdomain
software-garlic.gl.at.ply.ggdomain
idi-nahuy.netdomain
her-workshops.gl.at.ply.ggdomain
38.181.2.53ip
188.132.188.214ip
146.103.41.49ip
108.187.14.101ip
102.217.238.0ip
160.191.182.13ip
178.215.236.158ip
188.163.112.25ip
95.156.205.13ip
162.19.169.55ip
45.33.120.118ip
188.212.101.133ip
192.9.175.87ip
https://cs9-korea.xxchangyou.com/url
https://junjun002.top/url
https://shitongyao.site/url
https://2.56.255.159/url
https://47.243.157.77/url
https://mecurry.top/url
https://liux16.top/url
https://luanluan821.top/url
https://104.233.246.210/url
https://47.242.218.25/url
https://47.243.154.43/url
https://64.188.30.169/url
https://134.122.194.187/url
https://8.217.163.200/url
https://ysp06.top/url
http://47.239.244.75/url
https://nbb668.asia/url
https://amte03.top/url
https://www.hact08.top/url
https://amte05.top/url
3fe5f80ea3576d4c563e97fa8890fe3d73e9836f75ad7aec3242a0785b345ba2hash
fb98e6023533f680aea6df4862d407fa4c7e3b81e3fb7fb21c2a8f2f97363126hash
72f18d019123393ae610dd73b25e5f30a4945430f6f835700d6bdee19f566a30hash
e2ae3093df1bc88be2cc11f4ce2ad8017a14edf46cbaf0bd1141afc976af5715hash
494296e18b900e0a639f9fe39e8cdaa00eabd302d37fe5091df539b567f2c310hash
3ef9e9ab4b0f5c39d65f43b2227984e6ca423adad60e828f6af2e0eb7ac78284hash
a158ca21640ed1e56e51389f63600142038eac447a44193921a16e88e8166cadhash
5d4972e846d795b495d70fa054821c53678d2335b6879b4bf9a9116e101a8826hash
d85cfb227e6955e3304ecb9fc6798829d682d94a38a27b24bf1b6d4402ba79dbhash
28e883f496dcb23f5674e525d11af181f787c5914b849f232e22712792dfe18bhash
f4286863673358b6f7eb370d0a991475fd769bbe8b1bd789d8c07a574b57963dhash
b324fa51d55497c03ee4651ca5289e53815f7733dc62f8b0f4828785e9df4fcbhash
b7209a67d85f81862a72b176885a314b8b5d432c3c364f26f2cc4d4d6c254d3dhash
a2c4875714b92fdaca68879b3227c937d57867479d9975465bc3a8413966342chash
065bf101e8e4f69f4ddbfce23a8d8f08c9a29dbb9abdcdb9b278c22feb907063hash
fd948ea17227838530868c85af562df89b867865486dfb2f5ea8d260a3349367hash
b38d466dbb28feb20f4f8cc9d9a3b2204bf38e487e7cc5f057a756dd5f40b7c6hash
cf8aa2879623a59edd582a86cc22dfa1a082d8854659a5c64134ca9c622a093dhash
053f9ef5a6e5aa8716cc77cbd6f588c83a31f8f509a2891cf0ba35cbd7d5ce96hash
0c6f7dd04cbdf6afc93f19e09255ab6e8b90e12ea04869864e415e119eeea5bahash

Another file to check? Run a file hash reputation check.