Skip to main content

GHOSTBLADE

Malware Family

54 indicators of compromise attributed to GHOSTBLADE across abuse.ch threat intelligence feeds.

Domains

10

IPs

7

URLs

5

Hashes

32

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
cdn.data-1283.comdomain
www.amazonawsapirds.comdomain
xncb79.ccdomain
odsj13.ccdomain
sqwas.shapelie.comdomain
jkonnet.buzzdomain
tronide.ccdomain
myymk.ccdomain
ytl99.vipdomain
dcgfun.topdomain
38.22.89.117ip
103.97.128.67ip
162.4.136.30ip
223.26.63.56ip
151.243.126.191ip
107.175.49.181ip
103.238.129.112ip
https://sqwas.shapelie.com:8881/statsurl
https://odsj13.cc/beaconurl
https://odsj13.cc/resulturl
https://cdn.data-1283.com/app.vue.jsurl
https://www.cdnboostcache.com/sdk.html?s=bcdnurl
ea41ab57edc9a9a1cb1ae258325d6519f5d23571hash
3b2a2777cead3c4981d4b2106c1ec4b4hash
be4bb2ea6fc6959cdeb63238018761be56adb2d1e69e7c3d3340272187198b5dhash
64c52a52d64ea44a8b8e1a9fa367e37a9940f847fcd142182711b1b862efb8a2hash
25a5ca273abf934008ae2b5300f74f51670dfc702adf91b45ba6ccca32bf8c24hash
71fe83847cdaf8c4d6c1aca90078dc4021cb96010062279d26338f06b4a7ba06hash
a5ca944459c08038bfabf7ddbfc6ec2505ef0dc22b987569ed295f7378f30d59hash
c1b05dd8e7d060d2a40a859211528e90e62d0dc378f8af831933fe59122490ddhash
ca3090a6ea422c691b6454fc2ac64cc1hash
f424039f141ac422b9cfd178f317be9e773c2c95d6c72b0af0fcf7e57ca52cb3hash
a2e5458bd1057a66fcd197558f13de7960389862hash
0d066f4a16eb2463dc340e84c2cba87ea848ab3fdb40ef693e12aed87c75a9bahash
ef57e1c40c1d2394552e43c0c48d63f1hash
e1c4d064c1353ba75771662a61b7b529d4a206aa3cce1d5ca6529c53ab8b0946hash
cd005eeb916dddb3d30966c5bbb71caabd403464hash
2e443833dd58278d094acda2067a43cae1e88cbdf3902d7515776ab42f41b7e8hash
3196034ef1196c9151395859019674e14e3c06e3fdbf230c7e0d0c5f6211824ahash
37efaa4237a28a4be411d40de80b2935be5b8c4e6731ee1f858c609142a87445hash
9c7f86f2b82df171a09f096afcd8fa5b6b24f0b643aae765ad17ecf80dadb196hash
da3fe94ac1ffe0ae01adfab6d5e6cd58933e93853c4b6e664f76ca468981bb02hash

Another file to check? Run a file hash reputation check.