Skip to main content

Tofsee

Malware Family

2 187 indicators of compromise attributed to Tofsee across abuse.ch threat intelligence feeds.

Domains

2

IPs

34

URLs

0

Hashes

2 151

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
vanaheim.cndomain
jotunheim.namedomain
102.220.160.58ip
217.60.241.31ip
217.60.241.50ip
157.20.182.81ip
196.251.121.90ip
217.60.241.17ip
31.57.216.27ip
62.60.226.183ip
51.195.111.212ip
83.142.209.228ip
64.89.161.178ip
217.60.241.8ip
204.76.203.162ip
45.9.156.169ip
176.65.148.206ip
130.12.180.144ip
130.12.180.85ip
94.232.41.96ip
192.109.200.250ip
194.11.246.110ip
c3885fb6e521c358f6058bf09ab7835fc7f0aa71502da2cc7e44701224bfec3ahash
4c23450338219408fa510b4ea9976863fa36c65155f1c55f046c98d38083dcc9hash
283b0f136d26968786e7a0abe1354758de4cdade534ddee63b93569c282f2299hash
91bbcaf9410cf16e9db3d9c2a677cc43b86b16ba619368177a1866ddee15e360hash
3e5809695e3452e48cdfd69441d9e64510907a4bd87345301006e5cb4bd42255hash
4f521b4b79e46dad42ab9e416de3dafd16f8fe5d8ac0fd6f02ad22d25a246a4bhash
c82a55fdd3caeb95db17754e3ba270ec93a7eb3c9997f9f9c6f02de0e17bacechash
eef3daf1a78cce9eb07b6a623cbc32cf6b0e78294c2af33d63b6d52ffa92954ehash
b3c6d1a964f702e6e1f032facdd6f890abd2b834a1f1267415a91a22753b93fehash
7bde413f857d0cc61fe6f10c475baf356738c38b311398ca0a05b3a49c10818fhash
efd2425ed515feb6c6010e9f7710c48bfff3e2dba0838284d591a2f1947089b7hash
cbc177704add902878c657def96931ba32467380849adbd735ed2bf5d14c7286hash
948b3f47df991c93af3b13dcf6ad0ce272973e8c04c765e3433851931f0881a6hash
200e41ffafcab2f0db76b174e6601c90450b489489880949c0573414b5a16b50hash
701b7ef0b368ddbe9e3d2ddaaaf10284287f38799e536336dc4c821930f13906hash
7b06eebcd73d04e73e153faa4e7f1df0b4108fa9079c90b885a1eee5b0761d68hash
23b9847bd7311fabec83cecc885228a3754cfceba5420d50120934ea2a668920hash
8fcb2057bdac3ba88cb811c44a0d79358075525506b1517c3e713aec8d31a666hash
3e8e0330c65bfaebc579e71a371a34b617db0bb4d1eaf585d6af93deeda025b9hash
d7db753381fdd9779be8db851e3f7a015a6f584ae4a15b546f6bac80ccfe01d7hash

Another file to check? Run a file hash reputation check.