ValleyRAT

Famille de malwares

3 890 indicateurs de compromission attribués à ValleyRAT dans les flux de renseignement abuse.ch.

Domaines

154

IP

486

URL

42

Empreintes

3 208

Télécharger les indicateurs

Listes d’indicateurs pour cette famille. Les téléchargements gratuits et anonymes portent sur un échantillon de 10 %.

Besoin de mises à jour continues plutôt que de listes figées ? Les mêmes IOC sont diffusés dans le flux de menaces STIX/TAXII, prêts pour OpenCTI et MISP.

Types de menace

C&C de botnetpayload

Échantillon d’indicateurs

IndicateurType
hhskkmmtyust.cndomain
wuu.zoomqwer.comdomain
a13.auaacc2.vipdomain
cehoirfg.workdomain
ios163.comdomain
cfdasjjiophg.cndomain
ur89t27d.comdomain
utuhv.cndomain
dv.yuxuanow.comdomain
qn.ios163.comdomain
a24.auaadd1.vipdomain
qaloucndh.cndomain
gusikkwski.topdomain
usd8811.comdomain
qqdsbnmkloi.cndomain
teamszs.comdomain
2488666666.comdomain
slong.helpdomain
kkvbyroasdr.cndomain
zljjjfgr.cyoudomain
192.253.228.193ip
192.238.184.143ip
207.56.119.119ip
8.210.74.218ip
108.187.4.158ip
108.187.4.221ip
143.92.61.7ip
43.160.222.50ip
45.203.213.231ip
111.229.63.154ip
64.81.30.192ip
154.211.104.218ip
192.253.225.173ip
23.249.20.49ip
27.124.34.146ip
38.91.113.58ip
202.95.9.14ip
156.247.40.131ip
130.94.36.206ip
47.242.153.43ip
http://gxfsxs.cn:8880/getinstall64url
https://kaiwyrey.eu.cc/d/70878efbc582url
http://95.40.222.37/getinstall64url
https://royal-breeze-dc21.piecestrengthen3327.workers.dev/url
http://wwnbslklfdsrf.cn:8880/getinstall64url
http://withered-lake-8596.krzakanna172.workers.dev/url
https://still-block-4945.kubukushi4609-fee.workers.dev/url
https://tdfhdser-1433552157.cos.ap-hongkong.myqcloud.com/20260729213603.zipurl
http://95.40.215.140/getinstall64url
http://149.30.222.4/getinstall64url
http://osgyx.cn/getinstall64url
https://restless-wood-acdc.kubataffeltie470.workers.dev/url
http://autumn-mountain-e855.erinbraumbachlianebl.workers.dev/url
https://divine-shape-b4fb.erinbraumbachlianebl.workers.dev/url
https://lively-fog-72fd.piecestrengthen3327.workers.dev/url
https://mt-link.hxnxajp.club/cl/1tI4_QY7DCeBkEln5kmk9jrSOzkvCGnqOfOF.bP_ka4kNqy51He4r8IRtwhlZ2I_O_2nU1KmVVSZh_zV7BAOwQDLryYzqpE8R_QSdcIQel3f70U7Skywz.3B98ZVFhCxcdZMSYEd7RUj5.hif56qVudA9TU0yYiHnpS9u9fRMFRUpUFU4WNZg58wPV.jZgunKFKSrVPKboquHgJkbIYtGq_rfPM.1ldbJbc~--NuCyngcfq.n1c.5q--k8naVtPRTZtZg9yGwu3P8g~~url
https://aidksoflsf.cn:8443/url
http://103.80.135.33/getinstall64url
https://twilight-shadow-df0c.piecestrengthen3327.workers.dev/url
https://mt-link.jiosjcjp.club/cl/XyTkjX7q1dAL2BGNTd9WS4rxd2jM6dRs81I6p9oIabEzdaoU.hKBV4joWBgjmpuG1R7lQFSw.ycTLHGORYhj2SUP3sFXpIV6xdCcBG0RXRfRL7UHgFuOXTo2My_iS7qkQfe3qQ9HI3LZ8Yxj6VNOgU8mxReAxoA9FexD3dTAKBOPLMZS2YwrHmsCeDNS3nLZL3Bu53l9rtzb6rmz2xWLsLH_YpqfyMFUI0e7Ac9xKG.C0r8~--qdLygJPqKgnky9Es--_CzsqbW_5cv2HhL6j7Dr3w~~url