Emotet

Malware Family

520 indicators of compromise attributed to Emotet across abuse.ch threat intelligence feeds.

Domains

IPs

415

URLs

Hashes

105

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

IPs (415)Hashes (105)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

Indicator	Type
202.134.4.210	ip
61.197.92.216	ip
51.159.23.217	ip
104.236.246.93	ip
24.43.99.75	ip
191.97.154.2	ip
91.211.88.52	ip
123.142.37.166	ip
72.167.223.217	ip
190.151.5.131	ip
66.61.94.36	ip
109.190.35.249	ip
140.186.212.146	ip
212.198.71.39	ip
190.190.148.27	ip
37.179.204.33	ip
5.196.108.189	ip
195.7.12.8	ip
94.124.59.22	ip
201.71.228.86	ip
927ba539c524f8b7d6adef353d403730c6b3c3d9c5b949723b55d79a3b898543	hash
f10052e10c319749ccd6aead272df3e831e4d4224a32ac589e1a577db38e2b70	hash
fd79e8fa5e3801101a1305b6aba7a5e7fdc852ed9036d6d9a5210be414a5cc5a	hash
69f6938bd6fb402df9140b82e06d220b480768ed1ba47b4ecd9bf5124fba7e58	hash
cbf644b3dc49a4148301cb941e3b693615a3e2b61169fc62a23fe59184297a1f	hash
b841402ba599fba5dc3b4775aa53e26445a49c4d7df1fa8e64d26c4cc16c5083	hash
d33a08e10593effc2e5bd990a67c3759bfdeebf6d91ec5055d4bd4ad5fa07b43	hash
097ec0959c3f572c2f3de06647d53b1cc4e7d05c2c947f3e29e85602ee7beaf8	hash
f0e180d5a00ca5ab5c375261bd3b986b3ef7b5474fb5935b64caa7f02fb02148	hash
57179df82491963b6f773e7a5840c899d10b6847d104a9e4dd15a22c5bcb4e1e	hash
a4b07204b33173093041072e00e88d0083c88b88f634561aabe46ec8992f9332	hash
05bb6d1557363b7f227e458b80ac03806f306e2004364598eb335b5bcb6f191a	hash
3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094	hash
574244157302423f04971fb2c348a4ae598a67b15f1a2edda0b2ea3cfcc0a4d9	hash
a549cf015c44ad2571cacf2820869e00b44fab9ca95b002a7bdc27e7848e533f	hash
e2e5e10d16d3cbb3c71db6423dd6a383547504b3ff90a000cfa777a8a6062e04	hash
ac8e3f0dee44c2daa3fab6917ce4389d25941b39ee17142497268fda113ff101	hash
400b411a9bffd687c5e74f51d43b7dc92cdb8d5ca9f674456b75a5d37587d342	hash
c64ca381d3329fbaea7e63fa5dd2a07c60ca3e267c882121e34837074fd81ac9	hash
e8adeee1736ee068f79284077ec905137051eaed11f0be53cc1977f30edb3102	hash

Another file to check? Run a file hash reputation check.