Amatera

Malware Family

62 indicators of compromise attributed to Amatera across abuse.ch threat intelligence feeds.

Domains

17

IPs

17

URLs

2

Hashes

26

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
prunarok.loldomain
wuserrosok.cfddomain
noabasteb.loldomain
violcuglu.cfddomain
frimwanbav.loldomain
kefaisce.cfddomain
feafetoboary.loldomain
wuscokosh.cfddomain
fleewakig.loldomain
voskuzapoud.cfddomain
spinbode.loldomain
nujusnex.cfddomain
freesilkirk.loldomain
loajituzio.loldomain
bairvitu.cfddomain
pingtrack.clickdomain
metrics.demobunfiber.topdomain
141.98.234.25ip
46.149.73.60ip
46.149.77.24ip
77.91.96.205ip
91.84.104.126ip
46.149.73.57ip
193.221.201.134ip
89.124.80.216ip
46.149.73.219ip
89.124.82.121ip
144.124.235.102ip
91.84.126.69ip
77.238.228.60ip
185.121.235.118ip
192.109.200.63ip
195.2.93.115ip
194.164.34.182ip
http://192.109.200.63/reloadurl
http://192.109.200.63/regeventurl
d501ebd024fcdfa1fd7160b06511c240ae66c4726e12ac9133b855929932a0f0hash
44b424b73d77827aee492d919fe5d4e9ce21c802a7f8ea32e45a620a706b0f15hash
955ebe71979ecc26013632d86142e52f527441569a8e328383a3f8378382c95chash
6439ae266c4254e9916a365ba6a3cfa39b8193c4bd9034bd8249eda09a82ecddhash
47b04598800c3231e8dd3eae7d187a42b131f851584403be28f1f4364cf523fahash
575f0df983a4f3a513f9c27e157b8e3857a7727fd6bbcaca6614bec891712308hash
03d623bbb0ef63709e3cc299a146093f97d3a4ee1f46b2b55465b1304b372f7ehash
20a28e86502819386445ea8a13359429c78e97eb064288f17c1914c2266eb964hash
570130baff465b9d23b4dab752fa3923c92a538116f1d161b760b89c4cfe835chash
56e3ac5f4be4a1ef51b87e1df3d940f7c8663e0f28842252790a422e29b6ad92hash
9866a8ecf5414283d89528597ef7ff590f60e42aa6fc4972f61a083c2b08c1echash
27f8ee5c936e6356bd575bddc9dc5dac88f6d14004feccc9622da2862862b23fhash
64292ff235908c90b3f38e3c37a4bb2e474b76bede9a2f4a9a60e5d1a3d1258ahash
c4a461b72c5bfa08d4bffa4d10d265d3777efeb4066566442b11220cd48b88c6hash
5fa116e699f23e230c6c17a47d499feae725069ec5186196df24a7346e0f77f5hash
a7e8bb5263b34be020d8b5c938b4c4187f390b9240f9ce757cae953da9988227hash
643ef35536ff9273fb84b8504467b1a5645cd3ffd5476d64b99244b02131b205hash
1819827e17f31e72d456158b6b9c90af25a65945f6f05d04a060da9f24179b25hash
279d04c0cfd700c8bcb9acbed528131d3ffef8e25d12713e8649772739aecb92hash
bd36f4c15fe0acb6748da5ed12e45dcc37d412385812c078d1e4f04730e9f69bhash