KongTuke

Malware Family

892 indicators of compromise attributed to KongTuke across abuse.ch threat intelligence feeds.

Domains

309

IPs

19

URLs

196

Hashes

368

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (309)IPs (19)URLs (196)Hashes (368)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
chauvet.clubdomain
dummy-tf-test-dummy-rfnsp2ni.exampledomain
53bbwqsrdg3rxni.topdomain
trmrd4mz78xkz0y.topdomain
1muv2munv2jlsmf.topdomain
batdunya.comdomain
dht5z2yx50uypbr.topdomain
gqgbl0mu1p0amep.topdomain
u9ppj9u3hfphtv7.topdomain
zainbeauty-sa.comdomain
tgeb9e8zwea6o3o.topdomain
lowfoodanddrink.comdomain
edgetoken2186.netdomain
zrd6omm630kx5p7.topdomain
bookdayz.comdomain
tiixeira.loldomain
ewar4pres.comdomain
g5wlryfpmze7moa.topdomain
utwemm1gdzs9lwe.topdomain
sq1y5pp53vljhqs.topdomain
162.33.179.231ip
64.95.13.85ip
64.95.10.37ip
64.95.13.15ip
67.217.228.3ip
64.95.12.251ip
198.13.159.44ip
64.95.11.22ip
45.61.136.185ip
103.228.54.23ip
45.61.136.91ip
64.95.10.178ip
149.248.78.193ip
193.149.189.139ip
195.85.114.50ip
64.95.11.59ip
202.87.221.10ip
64.94.84.182ip
143.110.220.20ip
https://herndndes.beer/api/v1/sessionurl
https://dialectum.com/curl
https://conareras.study/api/v1/sessionurl
https://chauvet.club/curl
https://quilborne.org/turl
https://oakington.org/gurl
https://zgsjyxzx.com/gurl
https://bradtkr.com/gurl
https://cwrtwright.com/file.jsurl
https://shhuster.lol/api/v1/statusurl
https://espossto.lol/api/v1/sessionurl
https://jnlysj.com/turl
https://luthel.com/c?tk=url
https://gautter.lol/curl
https://guirreiro.lol/api/v1/sessionurl
https://vanloon.lol/api/v1/sessionurl
https://guilbert.lol/api/v1/sessionurl
https://bechteltr.lol/api/v1/sessionurl
https://omnivectis.com/gurl
https://rutrerford.lol/api/v1/verifyurl
61cb61de8534bdf6fc8baf190a9f2836e2178717403a6b4e09969d0d564df3c2hash