Skip to main content

Grandoreiro

Malware Family

867 indicators of compromise attributed to Grandoreiro across abuse.ch threat intelligence feeds.

Domains

3

IPs

5

URLs

1

Hashes

858

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
vmi3474645.contaboserver.netdomain
vmi3462151.contaboserver.netdomain
vmi3467394.contaboserver.netdomain
54.91.129.132ip
54.91.223.28ip
54.80.154.193ip
3.208.19.130ip
174.129.92.184ip
https://vmi3554101.contaboserver.net/d4ndocs/gateway.phpurl
d379217eb120ce70596c932cfcb6d971119a0e5d854e0db44c366210452e08d2hash
d0a5488faff3909eb48281e6f53d651e0b1e8231c892926b06a76abd7206966ehash
55ef81fe0bc43b04ea094aea4a17855ab5a0d018f0880596a3bbafcb0d871df9hash
3149395671d39388a65a4bff1b9671cee226f503c8432da8e32e17374cb36aafhash
f754708149abb311706c79b1fe5dfa0dbadc5e93fc654fd1606b256984afea7fhash
b605b9404f41d89620a86649c20f69c3408a98f1ac0e154b582a33b32aa38861hash
aba31a7579f05eaebceba5956a5d7f1634060e288a19d224d0ae6ea8b8480b10hash
b970e2f7f6d2632ae67577b4b341858ea2dcdfd57e859aa6eef051a393f71a10hash
ebcdffae014a22e4294e3e82e0209486a25ef5299142f4768fa3f335f0627dcehash
fdb65b07bb55b2b7c0a7515a1a56081dad716678649c5345df5de33186ec5679hash
1bfdb7d7d9ceaf4528102ee42246a21e9ef6fa1924f1d24f6a5d8b3a3c12ceffhash
24eec175ade277b487a16b8d8de59982fe2a5fc1807918a2fa53ddf9a8d8f867hash
33dd7847992c4e27b82f6a23584b4d412132ef15610f31ca355a83295aa06338hash
e8bb2731d64b51a6117aa2aeedea0093050ebd98660d0bbb6c8bdbd063851a35hash
882df8937c7fb3cbfd576a5d335df42a78821c8e26b1d0f88e4f4bac46ab064fhash
9066433f761394e8c8bf52c4bba2a030ff448323af647c2fa0502775b9d7ffc8hash
4edbd815697a4da10f5c0d8aae4571b2cccf360c39561275708ff11adebf9a8bhash
4bf3b30601c86b25768e276e9e3990184ef791d0ccaf0c118458278e7f2d4ae8hash
57b91c4fa2c260a45897a7896e76aa219b757e528f92c3aa51fb5313c6ac77f4hash
bc7cf8f5d0bee93064dc3c571c6d28a42990f320c7c3db418d103ec5b5647fa0hash

Another file to check? Run a file hash reputation check.