Unknown Stealer
Malware Family1,161 indicators of compromise attributed to Unknown Stealer across abuse.ch threat intelligence feeds.
Domains
1,054
IPs
20
URLs
70
Hashes
17
Threat types
Botnet C&CpayloadPayload Delivery
Sample indicators
wwwlows-survey.infodomaincandu169.orgdomainunauth-amper.ccdomainheybridgecreative.co.ukdomainlenabud.pldomaincesshealthsurvey.fitdomaintelltimssurvey.blogdomaincommunityalliances.netdomaincompocel.comdomainvolunteersnetworkofkenya.orgdomaindanielnavas.esdomaintiltshift.cadomainwww.lc3.com.brdomainmonbaratapas.comdomainmunicipalupdates.comdomainhoaphongcachdanang.comdomainstellarevanglemissions.comdomaingospelofwork.comdomainandreavurdea.rodomainladyara.comdomain195.222.53.130ip178.62.245.59ip159.203.95.70ip178.105.175.202ip135.125.101.1ip136.243.152.105ip185.165.169.57ip167.172.10.118ip162.33.179.91ip81.71.155.121ip151.243.113.33ip151.243.113.57ip85.209.163.250ip23.236.155.239ip13.32.241.67ip130.61.68.232ip51.38.99.224ip93.152.223.30ip37.77.150.162ip31.207.7.49iphttps://shadowcape.online/?p=urlhttp://93.152.223.30:5000/api/stealer/reporturlhttps://sites.google.com/newappclaude.com/clau-ver-un-30urlhttps://cybervertex38.com/urlhttps://sites.google.com/view/clavdenbewvewsurlhttps://shadowcape.online/babayla/zor/yarisirlar/urlhttp://sekirolegion.duckdns.org/api/endpoint.phpurlhttps://wiseview58.com/hjpjsp2/urlhttps://buyaneli876-oss.github.io/probable-adventure/connect.htmlurlhttp://homeinspectionsdelaware.com/curl/75ddfbae4fcacede52ef513ce634f82ad3d8358984b0bd49756cc8c50a55d501urlhttps://sites.google.com/view/claumacxvszurlhttp://45.90.119.34/DotNetZip.dllurlhttp://136.243.152.105/api/telemetry/file-chunkurlhttp://premierrentalpurchase.com/curl/5b7250991558c1089d217b180d9418df77886996c22f8f319d7f640895e03381urlhttps://sites.google.com/view/clau-deskt-ver-24urlhttps://breinsmas.com/urlhttp://silentlegion.duckdns.org/gate/connection.phpurlhttps://sites.google.com/view/payforwinurlhttps://irahook.org/babayla/zor/yarisirlar/urlhttps://sites.google.com/view/deutchbremacurl