Skip to main content

DeerStealer

Malware Family

174 indicators of compromise attributed to DeerStealer across abuse.ch threat intelligence feeds.

Domains

74

IPs

1

URLs

5

Hashes

94

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
divaselinsajep.comdomain
merengagoi.bonddomain
bigboysclub.cyoudomain
blatnoitovar.xyzdomain
ljubanawaterburythody.comdomain
solstice-line-drift.prodomain
brasserieontarioaube.comdomain
eeithfaeue.comdomain
ejtteyte.comdomain
tiumloir.comdomain
hjoeseiatehn.comdomain
krakiiatoe.comdomain
italleatgeeash.comdomain
eporiaeal.comdomain
anhwsoowoe.comdomain
eortxnrra.comdomain
teeoklnhrntgj.comdomain
ntneioehnetsae.comdomain
bcopleesr.comdomain
eelifjdoeae.comdomain
149.33.8.86ip
https://floridacambolashop.com/fc3411f3-e43a-51ab-a00d-f6cd430fa334/stock4url
http://cocuktekstil.com/rurl
https://royalindiancurryclub.com/files/AUHAVKIQ.msiurl
http://quebecsereinhalcyon.com/curl
http://172.236.199.34/rurl
0beaafb2ad45ff5e6b8a5ef5fe63ab544f727c53960ed874dd40ebbad868d5a2hash
3b6ceb32c834f69500fba0a1c76a2362679ee42077ebedd2fc242537c4432941hash
e5929c73939fb69820a63bdc6e2a3014a405815840ec5b346fbf0ccb9ffc4fa9hash
562bb0195ecd7959c535a5f2cce92125296d4921a15b5339f2f68ba815a7101bhash
1f73971eec969fa57692f037335896163ba0fcd78011bcbdb530e4212513ff75hash
0bc2a9d8c2aa8639da0aa5389c773f368dcf1cefbc66996c2736532afec08c04hash
05528726954dcd1e4bf94f34526138e34b4d1736b842952c48106723e21081dfhash
643fe4bf793c941d42c14c59d85fa033381652fafbd4122792c04cc0316c2d68hash
bfe06b2f18cdbc4d74b731a2fe52f66d3e4da9f9f0bbf9730b816b5418e5f12bhash
7f99bcecc41ac0eb9c6d765aa88ec35a164d80451be4c1cffc9771c92ab6a733hash
aee7978dc8889e53d9cbd36ff78c5c26d92e52365591accc0a7ba2afbcc40dbfhash
9f3d4df2d4ae2c25cb35ac2c06fbb211b8edc270fdc70074355ca7bd3c61a202hash
f64bc89ee81bf02b0ba2d4ba67521ddb1976434b1e1110e9dc721054243a9110hash
58b80c51e15d7671911e897767d011c2160c526a328b71d418b09d2c5cfb5886hash
5df2c14fe563444c11ebe130c839e724853cfe64c8415d0d92357c90378fe0fahash
1ecbb2f5cee01b95b406b90e83517eda2f7422b06e484c53aa84fac23f394b7chash
5538dba838398d6ce4f023a7cade07e00e4af7b67f707560aa1ec35dd9702e43hash
a5c2cd0db95e87a627f59f7c0b66753969a6a036744e21e437ead5074b9a30a3hash
71149e56febb1f0b96518016f33dcfae141c8d8e1dcca5de5b97519214ec6de5hash
416242568b18fd669338b6da2f8d3e084160bf6b2b91ac12ef3f3e8434b69e53hash

Another file to check? Run a file hash reputation check.