Grandoreiro

Malware Family

864 indicators of compromise attributed to Grandoreiro across abuse.ch threat intelligence feeds.

Domains

3

IPs

4

URLs

0

Hashes

857

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CPayload Delivery

Sample indicators

IndicatorType
vmi3474645.contaboserver.netdomain
vmi3462151.contaboserver.netdomain
vmi3467394.contaboserver.netdomain
54.91.129.132ip
54.91.223.28ip
54.80.154.193ip
3.208.19.130ip
e6ffda5aae782dcdcb21a546d62f5056ac20b0861f5765c347e98d6290c8fd13hash
379be6efeb32ee12ed2e82a0cd540c0322c9f664f386b4d3a883ae63e13381cdhash
4a44f5bb80a56b37e0e3db06f2c64dab744313fbaf039a0ca36191182be9195bhash
4f8989d2e3281743e8d594c845dc73e1400e5aa3eb4aec36ec7d41a98a5559a5hash
62c98d9b1be5e2a0d6f9121b107b503844a15652d415a7b82e3210688ab1ca26hash
d0a5488faff3909eb48281e6f53d651e0b1e8231c892926b06a76abd7206966ehash
98197ad9a88e52f7912773c75c703b70963e9d4413273cea7d74acd70003b6bahash
43c3894d7d44499a767bb843f6f16a1946071a0543ff0d121f6cf3aa4f88ef65hash
d6e823fa5d81b3878f04bcbaf4fad22279bc8e8c872a3f77323caf265a282c43hash
616052efcc34a8ce6bf5919857330f23d3a3063bad4c27b971ca56d9d7b2ea74hash
21de0b631e5af183cbd888714a782840322932a0d65eb5ee8a187a3e99396460hash
43ba09d342cbb3292d044cc4fe353692fd49f0fba36735559e477b9edb88d33chash
1081fe303ca6b0b926527b406fdbe6d309210d32af76834849bb03248d1a5913hash
3c1cd4546117a05caf6b2b25b2401ce81edc73b409a2e24136471ecafb545195hash
0391d0ac7a495c53dd5378a15707dcf51591abc5a87ad8a8948f55cbd10c58e7hash
1a62a7ec790d4f7a3753a200bfe154088c229b2cbb10fe6720892c8846561c32hash
dd52fea64ed4a42b15960a40a307e59b19507ea6218ba91546bf6949296ef052hash
220c69f7da5a2e2f072838c279f29d352d484d11df39a6cf1927f56d0cb2831ehash
5b6aec4358374e7b87e8ba96bbb75ceef16bea3065a66b3e4e880dee609e59adhash
8abc6b5dbd0deb3e30c6690687d204588e64b708874e9b97575c35d3d4cb70d1hash