NetSupportManager RAT
Malware Family130 indicators of compromise attributed to NetSupportManager RAT across abuse.ch threat intelligence feeds.
Domains
50
IPs
65
URLs
7
Hashes
8
Threat types
Botnet C&CpayloadPayload Delivery
Sample indicators
bryonsad.netdomaintiqwtkmma.comdomainnode54group.comdomainnode66group.prodomainmomsdodigital.comdomaindaskljtitaskastvv.prodomaindeoint.comdomainlobsterrakkos.comdomainkiskapeskaloska.comdomainlopapopamiskasupa.comdomainkasmokitomaccito.comdomaintomaskoslimsok.comdomainmsiulosjudiid.comdomainmxjxifkfkkffjjf.comdomainasmfmfmfmf.comdomainmokitomaccito.comdomaindjkmgndkjfgndfg.comdomainlomtophamchese.comdomainjpgomd.comdomainbksnb.comdomain24.134.4.221ip206.210.123.104ip120.25.239.36ip198.244.197.118ip185.23.192.33ip2.136.235.200ip167.148.201.52ip176.82.208.175ip199.36.81.52ip27.223.110.182ip187.156.127.232ip91.241.5.44ip209.99.186.75ip65.109.104.71ip172.238.15.96ip118.122.8.154ip91.92.34.228ip176.65.144.30ip221.151.118.252ip87.120.104.88iphttps://cpajoliette.com/d.jsurlhttps://pub-f2969eb764264a9280dffa75e6803e93.r2.dev/setup.msiurlhttps://us-addnewdevice.com/dl-callback/peevmnpz-psenf5s7-927uja3p-uey4ex9n/setup.msi/e5cdedc2f6f167f2bf343a5bb57aa7f6urlhttp://google2oauth.com/google.txturlhttp://91.92.34.228/test22.txturlhttp://us-addnewdevice.com/Vzj72DFgvUe1Psg5urlhttps://beroniw.com/hwkOP5urlb6d4ad0231941e0637485ac5833e0fdc75db35289b54e70f3858b70d36d04c80hasha9f1e873451adc5be1e9924d876ebaf79a467ab94b3f6a4e27068206f7b52719hash9d7f9ba8bde293ce8fc8b703ea016eda37bdb5726fa2f86f83e70d09fcef919dhash82c64ef8e028f5b58f3a61719792e82bc43fe01f8a6185700ff60b71943d97f9hasha5f7f39121b4fdf1d9dd9c2e8cacdbae1c00cd29383eceeea2cfb3b3a03187c7hash928ccfc1aed294c58960d22ec011f3a6730c1d35cf8d1d5cc54a408326636d32hash4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2hash6fa62584242262b5da8dab22c790e32cf84adae04d231c09d26aae689547a800hash