Skip to main content

Glupteba

Malware Family

577 indicators of compromise attributed to Glupteba across abuse.ch threat intelligence feeds.

Domains

21

IPs

0

URLs

2

Hashes

554

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
server4.sofolisk.comdomain
server5.fulusus.comdomain
server5.sofolisk.comdomain
server6.fulusus.comdomain
server6.sofolisk.comdomain
server7.fulusus.comdomain
server7.sofolisk.comdomain
server8.sofolisk.comdomain
server9.fulusus.comdomain
server9.sofolisk.comdomain
fulusus.comdomain
server1.fulusus.comdomain
server1.sofolisk.comdomain
server10.fulusus.comdomain
server10.sofolisk.comdomain
server2.fulusus.comdomain
server2.sofolisk.comdomain
server3.fulusus.comdomain
server3.sofolisk.comdomain
server4.fulusus.comdomain
https://fulusus.com/api/install-failureurl
https://sofolisk.comurl
9513d42ee449294c27dc1f6e60d667c47d39677cfa8ed8e719f0b5e78811bb8fhash
5f94ebc377ff055123fc1257dbf84898eb07e3819c9965bf46320300d13f82dehash
433ec815318e439551d66ddf3c605ba7da5e966b671107b425f73262d39a9c83hash
530ba3e07e01ded69f648ab41bf6967677526630e0b78dd91e03304622871680hash
6572d86423d70deaf50f882a87488edd2b3242b38c72a64db18771cdc07c38efhash
7e2fc238252c47231d37ab938055672b07423ce2688bb32cff3b97dc179fee9bhash
9b2f3159d474b368aa9a676d5ba6a010c6971166000356dd0374a2df41100570hash
e31eca26eebc6c55841ba9012aef2e64af914e13d85be5eed4cfee7d18b7cc44hash
62256fe57905ac3855bd6d2e200162e3692a47f3bb32946fbf6d85a97fb74a8dhash
b79c2d817b0ced7a0f16ebbb1a91defae311debe95bf3e54b8194003bb9985c5hash
b1adf30c5cb4c1a7c06e877308d0f0e32f6ea1b21105de5db7583a889d089373hash
c6c0b46b99ca7a4e1bc4d7969fc055721c1f3be10b618db6b1427f1e6b8f65behash
86a7de9388ee50b02a57d831d4539ba2c32877402a952ac8dcd1c7cf7c3e4cedhash
f23c0e1a0bfa1a936d4f96e69ee609430b99ee89819c7cf26aeade4411135f22hash
db2bd14c33d88911572956f5c535d99a5102a26332870d4c436f551713a0a28chash
b549699feb7101de2a3895a291a9034053b5c8b2e3b369cf947ae467e9239ab7hash
efc8cdf4d33e9b5dbdf0fa65b8815c79b712339cb061e892b3f181de71a2b3achash
67a20859e5bbdc1d14e676411102e429e3bef682b98c0482fbd8f531c1ff417chash
91654caf527c8419b947ebe9d028432b8266a08a4bea7e1290bbf07b55d8afe7hash
aaff5874dba82f4723fcfb408da376c7fbdeb6deaa2bf6b8b0581fb6cf6d3ea4hash

Another file to check? Run a file hash reputation check.