KongTuke

Malware Family

433 indicators of compromise attributed to KongTuke across abuse.ch threat intelligence feeds.

Domains

162

IPs

5

URLs

263

Hashes

3

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

u8x7zwdx3q9x2sr.topdomainus4v29jaz9cousy.topdomainvsv1ftyzzn48uhz.topdomaintommy-r.loldomaineellner.loldomainsartora.loldomainu3hqns4msrc4hei.topdomaintx1abouahsecw0a.topdomaint7mnduxhxky8sie.topdomainabernaahy.sbsdomainutwemm1gdzs9lwe.topdomainmarqueq.loldomainv4lfh2trw03nr9r.topdomaint5gnk3khm55f9ar.topdomainleannnn.loldomaintommy-c.loldomaintommy-x.loldomain53bbwqsrdg3rxni.topdomainbogisibh.xyzdomain855e6v1la8ngbep.topdomain67.217.228.3ip64.95.13.15ip64.95.10.37ip64.95.13.85ip162.33.179.231iphttps://schuctz.click/b345t329.jsurlhttps://schuctz.click/wvjn3nb0.jsurlhttps://schluter.lol/file.jsurlhttps://eichmnnn.icu/api/v1/verifyurlhttps://fraitas.lol/api/v1/verifyurlhttps://eellner.lol/api/v1/verifyurlhttps://bernardi.lol/api/v1/verifyurlhttps://bartach.xyz/api/v1/statusurlhttps://reindardt.lol/api/v1/statusurlhttps://ledesla.cfd/api/v1/sessionurlhttps://ritchie.click/api/v1/verifyurlhttps://schester.beer/api/v1/verifyurlhttps://schuctz.click/h5gqnaud.jsurlhttps://corraia.icu/api/v1/sessionurlhttps://nonseca.lol/file.jsurlhttps://jiminej.lol/api/v1/verifyurlhttps://jiminej.lol/api/v1/sessionurlhttps://gileert.xyz/api/v1/verifyurlhttps://schuctz.click/api/v1/verifyurlhttps://schuttc.lol/api/v1/sessionurl90fe8c831a681c8c1dc77a271bb417fd52479fe6fc79d6cb9b7ffaf13f801f93hash6af715b5105d6d16e02ee6d1de14410a8a0fd2fb3d7b752bb24be25105fac0b2hash90eb69c1b119e418b381c5754cbee51d6f4e10018c386228e954759a041eedadhash