Tsunami

Malware Family

370 indicators of compromise attributed to Tsunami across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

354

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (5)IPs (10)URLs (1)Hashes (354)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

Indicator	Type
team.tesisquare.com	domain
securelogin.lpzoo.org	domain
rc.de-zahlung.eu	domain
rnd.exposedbotnets.ru	domain
irc.shadow-mods.net	domain
156.67.218.115	ip
151.106.52.209	ip
62.238.37.207	ip
188.245.99.156	ip
87.249.134.3	ip
43.133.157.218	ip
94.140.120.193	ip
103.79.79.21	ip
45.198.224.184	ip
64.89.160.222	ip
http://45.198.224.184/nix	url
8621d8c1feb1a03a997782646c133a837c1bf1558590f4caff2e8270d613fc3e	hash
800c90c7b4eaf5562a0bcd6b640fd0a29a34aef48522fe579583d3866ca038f4	hash
a1f211877e5ac29682f07d0b97d02ee936ed02f3355b68d7163b3336164d85f6	hash
9c02b234136587ed01f5c8473f4a95aa6b9d7c0fdf38fbc87d2edb64347edd35	hash
6c3deb947eaf933fb57e7945afd96465df7456635b55e1c08b6a3394f4ac0142	hash
fff1f89c0e5a57690011c03d8bdfd32591511a0bcfe6b089d16a5897d3de60c8	hash
73adcaa30bfcaf249c983a758dcf1ef620b9dc6e05b5611d33dd486f4a30a6cf	hash
79f592eaa2ad05616bebd3eff646df90148fa6deb4eba35aebf80d9abdd03163	hash
3b65d645e10460a316e29664bd130092727f5ad7da9919c2a249496c21440983	hash
5b9f3c84b447f851c68ae6ed26bc6f9c1f804b0668839c179a99cb4001922d1b	hash
d092162fa98aafd0df807c828575c799335c9e562a353296c1f9439a8f9c3f3d	hash
c261f8d5089f4040eba3dc4c35afd1d42281d18710f118ae406b7eb4110ea0f7	hash
5499a3643fdb945722bdb8ab531b348b0ca8d08cbfdf2b056880a40117254a97	hash
02acdc11b6e22b8fa19ebafb10190ac28a7f0e5ee569a058c2df825337e4447a	hash
b429c0696541ab00c2a93b87027254d1540d7d3ab01e51ba1d853ea1d9272993	hash
f471f1b5d41bc812c0419152aa4c0a71191ec2e3ae1a825ba07c49541f35b031	hash
c907e8ae0842b40e8d8b660591d14bd2d4ea355028b658cea6d942457498d30e	hash
2116aa386d5b5dcd00e46e70c450a30446f78e76b2d2c70647c53ac638eec810	hash
43c75de6648a31fd2b997c41ec087ef9d37e1e9814f87b6c065b282121f40979	hash
a64ddaa1e3747b10863af3b60e79bbef1295a71ffdf3dd15a390d5926a6c3c13	hash

Another file to check? Run a file hash reputation check.