donut_injector
Malware Family10 indicators of compromise attributed to donut_injector across abuse.ch threat intelligence feeds.
Domains
6
IPs
2
URLs
1
Hashes
1
Download indicators
Indicator lists for this family. Free and anonymous downloads are a 10% sample.
For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.
Threat types
Botnet C&CpayloadPayload Delivery
Sample indicators
| Indicator | Type |
|---|---|
| opendocumentonline.com | domain |
| adhaehaht-42050.portmap.host | domain |
| vrstudio.life | domain |
| gamestudio.life | domain |
| senterprise2026.com | domain |
| deushack.org | domain |
| 38.45.126.243 | ip |
| 118.107.29.135 | ip |
| http://185.141.216.151/1st/r.vrf | url |
| 4acd7adff5c2193e7b0b9a6f8235534d67772ff3d7fa59b1215de011d7455ad9 | hash |
Another file to check? Run a file hash reputation check.