Skip to main content

GhostSocks

Malware Family

74 indicators of compromise attributed to GhostSocks across abuse.ch threat intelligence feeds.

Domains

0

IPs

25

URLs

0

Hashes

49

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
120.236.26.126ip
115.52.150.76ip
117.149.139.41ip
144.31.204.136ip
64.188.70.194ip
94.228.161.88ip
77.110.117.204ip
84.201.4.120ip
172.245.112.202ip
193.23.211.29ip
77.239.121.3ip
93.185.159.90ip
77.110.117.211ip
144.31.139.201ip
144.31.204.145ip
77.110.117.174ip
194.28.225.230ip
64.188.104.2ip
64.188.104.35ip
77.110.117.201ip
c6ff68ba83e84a873c8d3abbffac433501e3378ac09950d5cba13e451e101064hash
0b12a1e35c4d8464ba592c140726330cded2375cc975cd536e439edefdf9727bhash
e5a49062122c8c7a05187f50a4ccbf213f2f3b2e8df86806ce3acea7726bbb81hash
4d1efd06b57f610e1ac066543d08176eb48dacd932eeda5735dfcaf6bf493573hash
110c4f6f4b6276deecfa59627ce9a659907852aed392df5dd8600a2ea2ce11bdhash
3893c530c33100f70cd316096593689b556afd9d0faad7ef2781621aafc16511hash
2d42f44cb857540a05b76c65c8085acb682340470acedd65367fa370a1161ecfhash
400b9a2732d43e6892646779393aca039b872deeecd4c73a157237b235389575hash
f8c68770460266402c1558d5f1056c7518015b9cb5389d0dad1c16867db75ef8hash
cda5f18be615ad27e0477c6d249d245d368ac1de81ee48239a3e39814345c04dhash
8bcf2cabebf87a922bb0615f2e607e527fb98580f142416c9220a32a46b9cf23hash
f52fa1b8be929a42aafab8f0a80932e52b949ee35498f22b6d58e5e6ed107b99hash
c69d8aae34aab5c87f3b63fee13c196664ad71ac0be6344668dfafacc37e5003hash
3124dbce09ad84343aae13e837cbb5884543774906b8f341f66150e9714a5f00hash
7d717188690482e495079dffc3c45966e3b02a2f4711f1cb187ea2e91200cad6hash
50a606e258eabb822fe0b64ce17d91fcc17b1f4465aa874c2f3f1ff51fb3a956hash
414e14df8b34a900e51a5a4b5ebef6b7f4a53885a7977778593a148e27c7c989hash
c3c657fa980e2ddcd6fc94d3464fea9816a4d5803c6ec80dee6a8b11fed28d36hash
18e3b45774ac1a34b1addea07e6fe91a3f74f204007ca00c85f5a9cbad8cad82hash
9195c2f38b5942ec45f56b6a236e73f315da51ad2353e98c44fa9b6fff2f9c29hash

Another file to check? Run a file hash reputation check.