Skip to main content

CryptBot

Malware Family

1 510 indicators of compromise attributed to CryptBot across abuse.ch threat intelligence feeds.

Domains

8

IPs

0

URLs

6

Hashes

1 496

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
sulejx04.topdomain
weloadhh03.topdomain
devtu35.topdomain
morfec03.topdomain
remkdi35.topdomain
morkqz03.topdomain
moraaaasq12.topdomain
afrodeei26.topdomain
http://sulejx04.top/download.php?file=lv.exeurl
http://weloadhh03.top/download.php?file=lv.exeurl
http://moraaaasq12.top/index.phpurl
http://remkdi35.top/index.phpurl
http://afrodeei26.top/index.phpurl
http://morkqz03.top/index.phpurl
25e4f9e539d7e0461c55d4b4fa178c1cbb06760139e360da65648d777f118ca0hash
0d3141560ca1e293597d20822fce393602a54a8f7035691bf54de0d37f05ad57hash
7304be70f4e18d91047e2ee07944ac60dd018f35cc4321634b160e0ca39c28d4hash
d06e99a966f77b838f2134538979fcc7d5207ddbbd4c2c09b306c7490a6c0e2ehash
497c07b12b4e7f9082b872ef2aac2e9619f1dbc82c94993724cd246dd54b38c4hash
52a70a809294561f69bb7016818e295779d8e00c797097cf77d534ed3a07dd2chash
0924a04e22be1339356c24b69b2e75516c56b0b23aa500e9068b9c28c54dd5b9hash
3d283d206fbe14711a7803486bc3ce83b4633e091c86cc0ed27533efe4c12803hash
2dd214b7750c889a14bb6c1be4ff3b32e1bce2fba8d274de69b36b442486a1c6hash
385303ae7147e7811754c1d88c8bfc8b4c639812711c2b1da38aafa00f3acfc3hash
c26861430d8dabfd4ad23d387928b14a269071468a33ff37f9a32638341972e3hash
55a1167770213660ff09cd2211ba5d276bc8ca8cccef2916f29274520b987614hash
0783ed26022f0e0f99d7e6b72ee2d7d7372c97596249299275cc19db7b10a8c4hash
4036ab3fa5a19cdc1064ad55047dd766ea21cb1ffd4f1e4fa037eb29fa813fb2hash
c3315d1c3860a9a019c4693680a9d4522a81f3cc804aef5fbb760048401a44afhash
e315c6dbe9eb0b6e6655d8cdf9823e7edd58d25c6053ac02ef534c2e299194c4hash
ffcc7288342a28c0580bea142951bf4ac33a3f391d8f9323f9e74293d2817e82hash
5fa1e891bd97119caaaba3f4de500d6e6828b6030d4f6b2a56f5ac998beb4fb1hash
9423f239cb53933a8e5585af76a49d471dbc4fab82c10b67e3c519def8eed56chash
1a1473655a8c5bd91dd85a303d458cae759a73b50dbc635a0f3da25dfbd17297hash

Another file to check? Run a file hash reputation check.