MaskGramStealer

Malware Family

280 indicators of compromise attributed to MaskGramStealer across abuse.ch threat intelligence feeds.

Domains

8

IPs

0

URLs

18

Hashes

254

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
proxymonster.saledomain
zauber-edgecb61leise.icudomain
samtpfotchensnezhok9566leisegepard.sbsdomain
geschmeidig6307-kotyatanet.sbsdomain
ws.geschmeidig6307-kotyatanet.sbsdomain
hongkongplazaworks.topdomain
ryzhikpix6956sanft.cfddomain
kirk-service.livedomain
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/ufcx6bc1ef45e7gurl
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/6v0tazc5mboxujsurl
https://gist.githubusercontent.com/HexReaper/eec6869214d2b4e12bd606529128f8c2/raw/gistfile1.txturl
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/y74habwtyvsxarwurl
http://83.217.208.72:6062/url
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/6v4de3o1yz0du7kurl
https://ms.com-audio.cloud/files/url
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/yzc5yj81yv0h2fwurl
http://kirk-service.live/reconcileurl
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/ujgti3g12f45y74url
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/mzcxijwx2zg9e7wurl
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/2vk56j8h27whyzgurl
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/m3o1azkhufs1enkurl
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/iro9a3cp6zsd230url
https://hydrax.live/download/HydraCheat.7.5.1.zipurl
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/a7k56jotufo5ab4url
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/q7cherolivolejkurl
http://kirk-service.live/6e07a7147a15224446034debd2d1288b/ejk52zwt2js16rourl
abb8939d54062dcc47e589f1b3a738cd6f9daa721ddf40d9643ece9ee540e36ehash
2c50e590184d785950d9a2c1a93bbbf5e70b32c34230bb7bd93625c977e84559hash
6a8a3c40f1dc1ceb671671b69b725c7ef9cd68312e141b32577bfb30abf21142hash
0c6f4a6a439dd4573ebcd755099b2466ddc531fe8bb0912f09afb66d10664ac7hash
f507c38c06bcaa13c785d1c0480c5d491074a90a9e8ead9cc9f068bba63ab306hash
882c0cc153b63fb8531330847344ae68a50ae1b9abfef7e5d061bb7fc2ee130chash
ef935b18d052e921b5da3df6abb513aa3936f5a087afcceda2d6655f3214de2bhash
19eafe6c2f779dd6f53eb028d4c70ec7ab2646e99906fea5a2a90bcb11f9503ehash
b716fa3dbbfd5873cd5d2cd1a2f26310ed10963781cc47e2aa0b062dc85275efhash
58a45db0e8d248a13b58024ddc217512e5d276d5f8d29a530b1e02a8e0d537d5hash
a01f91e44b2a59f24b9e9c72e46e2207b6f86526hash
d9c9c0b3ef017256c39d5d6eed9f3e5c0baa3387b495c395b871ce8f5f063d3chash
09ccc96116fe4a5a3fea84b917dff0447a33b20b4ee94e509e7a847e345c9953hash
cb46e59ba30a58775e80a51f23232e30b35c7eb11f8c5eb20015c2404e68ce88hash
2f6efb810bee11eb85bfa3edbdf9015d7d9cf08fc1e44c979a7e6bb21e100108hash
3745b214f3e0af267b487888f95820b02e1f69d91c3e819af1d818e6caa37254hash
1067f55441bddc485095ea43f6e72468430d5b69daaa1db23538839c1206b59fhash
f9929c5bb18eddbaec3c625a83745ff94459b5878eb5ced09fe372014f7b169dhash
2d4c91d14ec9e2d3a5fd21eeef466a4c4be049f6b79c61d5fcf6e2b9e49f9002hash
2d297564eb38272600ba8fa31c73bb6487ae0849e2e49af2e23ac359c97f1ddfhash