HijackLoader

Malware Family

396 indicators of compromise attributed to HijackLoader across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

368

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (14)IPs (10)URLs (4)Hashes (368)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

Indicator	Type
quetrex.com	domain
mygameszones.com	domain
iwannagetmoremoney.beer	domain
slippingpit61353.icu	domain
fullcrypters.net	domain
analyticstrack-pzh.click	domain
analyticstrack-api.click	domain
pixel.analyticstrack-pzh.click	domain
webfloweu.com	domain
webupdateflow.com	domain
mullenpalimpseststudio.com	domain
fusionjanicepalimpsest.com	domain
fortwaynejubileebrontide.com	domain
gestcular.cfd	domain
141.255.161.122	ip
154.213.177.2	ip
179.43.166.242	ip
179.43.139.10	ip
193.233.112.188	ip
213.165.45.183	ip
144.31.4.78	ip
92.255.85.108	ip
179.43.167.210	ip
207.246.98.204	ip
https://ohhhhhmoney.com/fF2	url
http://78.40.209.164:5506/dk.vbs	url
https://widexenmexico.com.mx/plugins/Cloudflare/challenge/IsHuman/ID53728/	url
https://getoutofthebackseat.com/HashManager64.zip	url
ba25a9aa28fda73323beb643cd4e9f638ceb6d5e1c61459e133d41763c8c57c9	hash
70715750bf70adf1f646d35e5387d6130eff1c5d4d2b844f198b4116987583fb	hash
f037a658f8a9340faa41f98f2ea03e91966cacf5ac61ba99c049545373e6f4a4	hash
527f8897a003053e787e13ef6127871aef69c9ecbaad0d11311f45be9feac205	hash
26134b043d866b85cf5a6389c64c885f814c074d0cc9c413ce344f88de3e8f15	hash
18a21ca3dd5a492f47ba194d8f238ee94d67bf6bceee6d5992b3174feabcef1f	hash
d17b5a24392f234ec7de0b8040b56ce66aedd8c29ca6dc864f15d82a107bff42	hash
81eba7364c0a7bffc71cb578e2e68a2589c7580bfb4073eeb0a027f6e897d9c2	hash
ace23351634f9b816b0c7aeacedaa41fc0e8d1bdd7b98ca4830782453ff34b3c	hash
cda37c2a5c7ec5853f36d173bd1a1a878b25b2f7639f10d79571ce86374e037b	hash
4e0f54826bbeb122c19fce33875069f28928499561889dfabc8ef2f5cde9f2e8	hash
92bf8858f323d9d335729cfde6cad182d3f6285b59b31ef11e15448813890a4e	hash
2657cb207fecb8c9d335ef1b0e4ff67d5ad8b706e3f71928182337bfadee0a13	hash
17005c9a5f2a9a57fe71ced46712c688	hash
66c51b2bda61c2555a6fd18b8999a9ec5520152e850523ed0abe8eff3c5ff124	hash
1d0613b24255f398339c0697dc63fc88c97ae35fba083637dbd6468982e8cde0	hash
5b1787c5cdc448042fbee6ec3631d36ec50185a788273ecf9750cfcb90ee163a	hash
db618f90584df89beb2b1581d71602ecf4560fda58eb2267854978e645341ace	hash
9c6d91e7ba5d841bd4b6a38251656f3b230626fe44c9849cfa5a160bafb9eddb	hash
11e50f88499ead9da9d4b0b6c062651181f28df1bf1078c5d69bdf55a836b370	hash

Another file to check? Run a file hash reputation check.