Skip to main content

STRRAT

Malware Family

1 431 indicators of compromise attributed to STRRAT across abuse.ch threat intelligence feeds.

Domains

2

IPs

12

URLs

0

Hashes

1 417

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
selkin.newddns.comdomain
jetos.2waky.comdomain
204.10.160.171ip
77.110.115.255ip
104.239.66.83ip
204.10.160.200ip
46.246.14.4ip
217.217.97.106ip
204.10.160.215ip
204.10.160.182ip
185.38.142.5ip
41.216.188.74ip
185.38.142.158ip
204.10.160.216ip
0637b702870e95dbf7d13ed74608f0fb25d8c6524104aa0ab9886672e5a9a180hash
0b600c0d3f98a1ee3c11d8e81e969f12f83c2325c0076e1681ab1862b758e511hash
7475c3b0aacef66709e7cf06d4a7be5756744f6d5870886989bd631390e63c05hash
736c46cbc19813113b77ea29f42b32609735953f65a6e597ae73d7018dfc873fhash
389976e13502e6415754c652f1159677e72aae519c75061ec459c2a094196659hash
9142d654faad73f016a8e45f7db19805707593793cddba53bd304d3a95ade840hash
664954cc6173fe15aec267b6122f197bcb5672e84b1786404a7ca0812ffbea6dhash
ecb914f03ac66ebf989e146663e38808d286aa358a6948421a29f1884961d971hash
3e412415534fe225cdff7d62e3f6aed4a060e83b18b2d139e3201886d6fa37f3hash
0760fa245c5be521cd9d1dbe8643cf6af3dd2e071aaabd65a9e8a25243003b6bhash
e2031c646b3637c9f97b0742b58cb7f6973be937e310e6e28792f4c614113532hash
8547b8219450f6e9dcce59c44e931cfd66c1ed28d04dd89f3156d6e4b8700645hash
c7ed1cec47b5f8d575e739d4c77d86a6222a64539e5870229fc4488bb0b50b05hash
66cbf9486acc72e3c75c4909c262234ccb913a3475dd6ce7326321daa4732240hash
ddb8ab6024abb8a8dc188247bcb27a3cfd861df8cfad88e1701f9aff393fad6dhash
107dd50b42ddff0c7953aebf62727778e5225c2e81fc9fba0bcecbbd4b2689a7hash
569f5f6de156bec90f9b0b0e4e707a702c0fea26ab6a0711e32f4a413995ae7chash
c4fd5273deb19aaf3d5c68d72b3e071a47b16097c391fe5fada2df7f93b18cc1hash
30140d8e3c5611ab4d7523cff5b0b8eb125f8d726bd642ec9be70ff5649a5405hash
292166ac7825b704a10c3369936492d65af82524eb293203d813f9d48e93c8f9hash

Another file to check? Run a file hash reputation check.