Skip to main content

SVCStealer

Malware Family

157 indicators of compromise attributed to SVCStealer across abuse.ch threat intelligence feeds.

Domains

0

IPs

0

URLs

6

Hashes

151

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
http://196.251.107.186/svbia/post.phpurl
http://62.60.226.232/zpzp/get.phpurl
http://196.251.107.186/acovp/post.phpurl
http://196.251.107.163/bioxp/post.phpurl
http://192.162.199.186/usovp/post.phpurl
http://193.178.158.107/vbv/get.phpurl
2870b115f689a226c79cc1428ed2c1cb8b118850bfa21401a397de22ad9250e6hash
71b4be2146f9d0362c6aedbbeab3d459ec5c272f375da85dcc673f8724bf7363hash
9ada41cd2f2375feaefb6cf3a7fd313765efb3e30e13f4d12dcd1800232e6651hash
32b173a4a2bbc767d93bd6c645170479f1d3eb27f9ae5b47c9260ec31f739bf7hash
be3cfc2710911f0449de96842f1f41b6e2e01fa829575abc5a058886728a020chash
38efdf62dfb36898c662bb912c0e76d79e8836bfhash
b584b74f0cf25a6a60f5af6e951bf4fd0e12b63709850457775235ef55a01342hash
7aa1476644721e9879a2c6397bf76a2b441de943f1a766dab09a2d3d9bceb698hash
0c181b7d7e866be58430f2b4ea0b8822bd1c1a5c64e63815ae9b8531134f42b4hash
cf37404dd84590b3cef50fe07632712bdaa52a961f74fe7f2f4ee20a22723928hash
d08578232f63c06fa9a0cef8c78d32e345be95ea005809d8beb390810467947bhash
6fac8becbf95d221ccc9c68c846c3b847e89dcf131a1ef11efbd646583f59f4chash
0da1a26f3da6f4712aca28a7cdba40f97fe228c604ce7087bc8db990dea3fc4chash
54923ea8ca61cd3ed1c8debdf9254799d93603fc23c34553d893812897d22340hash
59c6cebfc1b60e8fed91078d412784d3a888034356bd8928a67921d56d222b29hash
62d98f765dc8bd74c921f483d9e5464c9277dd062f5d6114abdc7f030c2ce805hash
bd035b082079a7cdce87e983f97a43d457d9921e71b90dbe66248e0e9abb6c2ehash
bd261f3b2ff652cda344a9ec88731eaf1db858d54dcebe5ce0dddc3edffcae7chash
d10211ece3d96906605548595fc7645be65e85ebb93cb0570ba79fabd4ff127dhash
38f4319cf0f94a2bb262d2321c3058ef3e5611c5c9d8c80768ad600031503154hash

Another file to check? Run a file hash reputation check.