DCRat

Malware Family

190 indicators of compromise attributed to DCRat across abuse.ch threat intelligence feeds.

Domains

10

IPs

172

URLs

6

Hashes

2

Threat types

Botnet C&Cpayload

Sample indicators

bejow65678-31238.portmap.hostdomain3000vps.kozow.comdomainsegurityopen12.mysynology.netdomaindmitrievan.temp.swtest.rudomain583848.clmonth.nyashteam.topdomain954591cm.nyashsens.topdomainbl.furries.com.cndomainvelve12.duckdns.orgdomaincomienzo.ydns.eudomainguaricha.ydns.eudomain181.206.158.190ip93.177.103.55ip45.202.1.100ip20.64.242.233ip128.90.112.23ip69.167.11.229ip178.16.53.117ip91.92.241.80ip154.18.238.18ip172.174.154.130ip193.143.1.216ip158.94.208.29ip188.126.90.12ip23.235.185.46ip4.235.114.15ip46.246.82.18ip91.92.240.194ip209.99.188.248ip178.73.218.4ip142.202.191.251iphttp://f1232411.xsph.ru/9b6d596f.phpurlhttp://a1161282.xsph.ru/8929ff41.phpurlhttp://a0999723.xsph.ru/40db11be.phpurlhttp://a1158594.xsph.ru/497e8ed4.phpurlhttp://a1143281.xsph.ru/fd99c1a0.phpurlhttp://cw212153.tw1.ru/L1nc0In.phpurl3ee8a9e1c4e61b215998e8cb23521e2b3417abbfa196ee2215a04ec788ccd114hasha1548a5dae03edf08e6c7d7e25645d2dd5b4d5008867edbc5b1048394e6b1d09hash