Skip to main content

Unknown malware

Malware Family

15 410 indicators of compromise attributed to Unknown malware across abuse.ch threat intelligence feeds.

Domains

4 303

IPs

3 517

URLs

6 162

Hashes

1 428

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CCredit-Card SkimmerpayloadPayload Delivery

Associated CVEs (5)

Sample indicators

IndicatorType
remote.drazyland.usdomain
dailyhomireciple.comdomain
aufstellungstage.chdomain
admiration-noble.sbsdomain
nvms9000.sudomain
bestcheats.spacedomain
captcha-web.ccdomain
compensation-apyx.fidomain
viki-play.comdomain
pixelsoftzone.netdomain
planetwearz.comdomain
infoworkerone.comdomain
silentport.cyoudomain
mymoroccanhouse.comdomain
bonavol.comdomain
clnsdns.beerdomain
dadsv2.loldomain
remotev2.whbackend.rudomain
xqpw71fnqtwe81v.myftp.orgdomain
tyqwpnfqht82qlo.bounceme.netdomain
165.245.190.70ip
207.180.58.21ip
106.75.213.243ip
175.27.236.4ip
16.171.43.152ip
15.168.12.234ip
51.161.87.215ip
117.50.214.216ip
158.94.210.248ip
207.180.225.142ip
104.238.153.249ip
62.109.10.128ip
20.61.195.1ip
85.11.167.34ip
47.106.248.192ip
47.99.54.48ip
70.153.18.45ip
109.123.249.123ip
51.222.230.191ip
89.127.235.142ip
https://fugeapmveypu.hubabubanobot52.comurl
https://luckymatrix.co.uk/url
https://krem.mesoptik.com/static/modules/nzX44SVMY.binurl
https://strastergy.com/url
http://166.88.134.75:443/0x/clburl
https://lifehtx.comurl
https://5eplay-com.harikrishnaharirama.com/url
https://doc.lauraice.xyz/update.phpurl
https://www.mmmmmmmmmmmmmmm1.ru/US.htmlurl
https://period-checkavaldx.comurl
https://goooggle.click/download.phpurl
https://jsonkeeper.com/b/J0VBJurl
https://access-allowed-01.t3.storage.dev/index.html?OLtWV_Msu1isgaOD25TCtd2mJVnudHgklyGO-D2DRfQh%B6SEPBi7jlti=R4BI9HruOxJps8V=XpcmFpgqHU4WUSA3gdHsSy=Bls-WgVIF9=t3PyMkQCjaFo1BHVjGwDurl
https://www.njfamilyphotography.com/url
https://invite.jalallinux.ir/Windows/install-guide.phpurl
https://metanailcomplex.usurl
https://www.meet.google.debacssa.com/Windows/index3.htmlurl
https://mampodik.asia/url
http://165.73.108.6:8028//sshdurl
https://lsikjsns.beerurl

Another file to check? Run a file hash reputation check.