RedTail

Malware Family

253 indicators of compromise attributed to RedTail across abuse.ch threat intelligence feeds.

Domains

3

IPs

237

URLs

8

Hashes

5

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

proxies.internetshadow.linkdomainproxies.internetshadow.orgdomainkiss.a-dog.topdomain66.132.195.118ip216.26.241.217ip147.139.136.75ip185.38.148.2ip120.79.220.198ip27.153.157.138ip37.66.147.5ip176.65.139.43ip107.172.252.155ip45.3.54.189ip87.120.166.130ip157.245.123.148ip70.95.146.19ip45.148.10.208ip135.181.34.178ip185.231.252.243ip181.104.43.225ip31.76.46.226ip75.184.86.154ip79.143.178.79iphttp://107.189.3.150/b2f628/cronb.shurlhttp://209.141.58.166/b2f628/cronb.shurlhttp://140.99.32.48/b2f628/cronb.shurlhttp://205.185.118.246/b2f628/cronb.shurlhttp://b.9-9-8.com/brysj/cronb.shurlhttps://14.46.136.77/shurlhttps://121.176.14.102/shurlhttps://217.60.195.113/shurl048e374baac36d8cf68dd32e48313ef8eb517d647548b1bf5f26d2d0e2e3cdc7hash3625d068896953595e75df328676a08bc071977ac1ff95d44b745bbcb7018c6fhash59c29436755b0778e968d49feeae20ed65f5fa5e35f9f7965b8ed93420db91e5hashdbb7ebb960dc0d5a480f97ddde3a227a2d83fcaca7d37ae672e6a0a6785631e9hash7c8e7619c5398d3b857e6f72cf791e2c2e27762ddd8521eb8971c893cdb8b1fchash