Skip to main content

Coruna

Malware Family

190 indicators of compromise attributed to Coruna across abuse.ch threat intelligence feeds.

Domains

96

IPs

2

URLs

16

Hashes

76

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
www.mvgl1ne40s65srdtnlc.infodomain
www.nipreaznltdoof10dsb-so.appdomain
www.vbix6zw2k7b1tsccegyt4eyn.livedomain
www.72twifi6o1x7zs4jag.netdomain
www.rg82z9wtgt9b-m61p.ccdomain
www.gbgzdxue8l3ajj7syni.infodomain
www.z40xmimvhbytcnppy1rs3.appdomain
www.a0zajmpz4610-sdfbt.ccdomain
www.knrd2up67onim5epfcxgvx.netdomain
www.t9ffxu6zhf915fadjv1.appdomain
www.vutjsf0sd9sdqt2rkzvgzv9a.orgdomain
www.z6dotx17rqtu6wrngq4.comdomain
www.qdh71-y6j7vxgw046v4cvgga.livedomain
www.v71zxahc3jd0txzxs.appdomain
www.oam6g5x6u0hrmhe50mctg.livedomain
www.10xddl8puxw5rn3cg8pdus.netdomain
api.getgoapi.ccdomain
getgoapi.ccdomain
ip.faicai888.ccdomain
go32ip.74rcu0ntwgvtpzn.icudomain
199.30.90.154ip
185.189.45.40ip
https://www.amazonawsapirds.com/68c279aa488ab8da27c5925e08d1170693b92729.jsurl
https://btrf36.cc/resulturl
https://www.amazonawsapirds.com/303ea491b92e7d4d0adee18ddf5a5ab5c2ccd1de.jsurl
https://www.amazonawsapirds.com/496041705bdc90ceee1b4ea254b208261e89075b.htmlurl
https://www.amazonawsapirds.com/b99744096a325e6726856364a6a05eb7b5727f20.jsurl
https://www.amazonawsapirds.com/03fdc4d41b99943685ce6da11b178573717d0bc8.jsurl
https://www.amazonawsapirds.com/2f870ab288a59e71f449735fa126e71d38825d5e.jsurl
https://www.amazonawsapirds.com/c2dc9ff745629af5fcd829e5077170f59ac38826.jsurl
https://www.amazonawsapirds.com/2e621e2dc5051b2596fe36a21804bb8f2c7e698f.jsurl
https://www.amazonawsapirds.com/0e0f11c859363b87e7a134df85502ca05a7041a2.jsurl
https://www.amazonawsapirds.com/e5a266f2e46e7f8fc6fe64da918d49224a2f8297.jsurl
https://btrf36.cc/beaconurl
https://www.amazonawsapirds.com/58a69b9b9c205320ef3194041ee92aeee4f482b8.jsurl
https://btrf36.cc/hxurl
https://www.amazonawsapirds.com/04d7afd7f79ad0131b7b1d0be121f3380a541843.jsurl
https://btrf36.cc/heartbeaturl
7ed8bb73e85b210ebf8017f86785bc221688ace4321204c3b93856c5a99bf078hash
acd9c6c8cdd44ae683696b40a9455929e6cb7a33d5aab38aadbefa001547ff0dhash
9944de246a9776135ca42cb6e37a969085cba5068768e0611be2f49e14516503hash
36110d8ec6a728b44e38561e786dce4f836d7df7ef8a689624a026003299ea70hash
13cf1829901c393d6c66895b9ca079e6faf57cb105504e6294a9f826d953f0f0hash
e1853eeff058387e9d3fa5cfc066819db47b8fd5400d14e9ce98c1f7059eb0d3hash
5ad7178fa158281237cbf900791f59e8bf7291e28b4cc48fc10bbcd917750e19hash
75d43070821a0f8fcec61fc2c675c1b7744f5cd37524eb13cfc0efc3793edbf0hash
e368950457a918b09ea7b84d299d5844a25a20cb25134f39a9acf63ec280da6dhash
c2eb306701f843ec72970b3d1913b21d925b632e0075ec9243a973f6e67e52aehash
c31810ef3950de57a49132ed7e3bdf953b755dbde7c396dd39e80ac9c4439920hash
97af3a524f933dc79f213c03865dea7bf01abc24c084edfbc25f09bc86edbb6fhash
95797c4e86e88b74ffb4457caf4f3208a678df0191c0ad10e33863790450a537hash
b4290d69fbb099f72f0b7ebc5fdb1211db0810f79372b871229746027d23f52chash
473f182b8cbbdb5b4b29b7ad875014d66f1691ed2e770c633b559d97243895a7hash
eaab0874332777ad8a03a292bcd608a3358547f9f16ab551d34eef35d5cd539ehash
6bf4caa49c840f05f0a49dc6324dc02996e71a52ee9c4072df9d099604f7ecb7hash
f5a16a6dc644d690026932a2453ebf41ed61b9b36cb9c26ebc359b576ee7ee6ahash
6b518b0d6d6bca7485b68cc8f12cf20f9c95f4c99174e2ec4fc1cd637db0e424hash
b0a7077b5d5baa1fb2d31115fbf226bac47f54c9aa499de343385cab6712f79chash

Another file to check? Run a file hash reputation check.