Skip to main content

DanaBot

Malware Family

1 557 indicators of compromise attributed to DanaBot across abuse.ch threat intelligence feeds.

Domains

0

IPs

242

URLs

0

Hashes

1 315

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
156.252.185.139ip
37.244.233.190ip
45.195.214.25ip
77.67.125.219ip
154.86.11.21ip
154.90.78.76ip
45.195.215.19ip
194.31.197.64ip
156.252.210.221ip
68.166.230.138ip
156.236.1.156ip
194.32.114.69ip
68.166.230.139ip
45.195.215.109ip
45.195.226.194ip
156.252.210.26ip
154.86.11.43ip
154.86.11.77ip
156.252.173.132ip
154.86.11.121ip
0f61e4c12e7b1adaef470477741d36eb115d8ec9fb6ad827e6db4104b2d9ca85hash
f0c8e87c4048df5378a2f3d23a9e3f2af25e71bd1fe4ec08e24e21adcffd9ee0hash
03b6c5f9885f4d8ff212b80a077eff93b860b78af58481d3d755220786bf988chash
233df04bc2ee124e7af1399d77450d7db5985ce99defde5ce0604d592bfffc77hash
129ec8324b7a20401316a98a6087c64660d9a7b43c551f1c3123478a36f296e9hash
616de0ced6192305981c1f72c9058dd1b37eedda93fa3db26f4df59df5f83bcbhash
1710e2330092b4aaac3af63bedb11b9a5c8ef8d4eb61fed15807a7425e8e6518hash
f4e5d036ab88c2034b9bc132671294d2eabed5f6c93a2c21abd1efba788d6865hash
a1348f40de8bd662e546465d653e94855ac5ae33cb3ce4d36ba6a0e3d842db73hash
75aa979f8875e3c4586d311d27612058c99e975649cd4ea26d0ee43d98888c8ehash
fd93977183f1f74e92f050504a5e0cba527bdbc252a6f0311a3456af81a4ba48hash
826d2e8f10f6991f25dae46522fb53d041a4d740c4ae0a8b570c41c099e9e31fhash
26501c39a3fd6a6daddd186479d4422671bdf55adebc332266d48f25030b2e7dhash
0f6b85e938161b975262f7749c12466dd6f632db277b79bd656f7b345b0bb6fdhash
0d6b46f8c96f69555ad79d7fdfd91c2eb24e3baa5b89dea1b3a024f28cb40be7hash
2e867f5354044d36e1fc8f47f917c7cc8ffcf00067fa313d907a67124816c9fchash
a274888d26740b535e8b11f4e55248229c0a1625e6ba4f08860687565e61641dhash
72bc6f8e78f8eac529d0af0abdedfc86858f6ea1c9f43aa16e6b560343171f05hash
4f4432ad4cc8c5d43dd2fe135717bdd65f417f91ada36cee4ae8f9af0269f8cbhash
8ba26bcf8b338beef96ddfd24365b4e1ac2c2760cec16389d6b982f4f0bbca8bhash

Another file to check? Run a file hash reputation check.