Kimsuky

Malware Family

24 indicators of compromise attributed to Kimsuky across abuse.ch threat intelligence feeds.

Domains

11

IPs

8

URLs

5

Hashes

0

Threat types

Botnet C&C

Sample indicators

ndocawverify.dynv6.netdomainndocazverify.dynv6.netdomainnid.ncodbvverify.dynv6.netdomainncodbsverify.dynv6.netdomainncodbvverify.dynv6.netdomainndocauverify.dynv6.netdomainndocavverify.dynv6.netdomainnid.naver.courter.comdomainuser-kakao.login-accounts.dynv6.netdomainaccount-login.userauth.o-r.krdomainaccount-auth.userlogin.kro.krdomain51.79.185.184ip118.194.248.158ip176.111.220.168ip118.194.249.154ip118.194.248.246ip152.32.138.146ip118.193.69.19ip38.60.220.73iphttp://elecviews20.dynv6.net/urlhttp://docviews12.dynv6.net/urlhttp://fetch33s.dynv6.net/urlhttp://inini.kesug.com/maith.phpurlhttp://ch.10001mb.com/mort.phpurl