MooBot

Name: MooBot indicators of compromise
Creator: isMalicious
Keywords: MooBot, malware, IOC, botnet_cc, payload

Malware Family

280 indicators of compromise attributed to MooBot across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

264

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (1)IPs (15)Hashes (264)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

Indicator	Type
wifihgu.duckdns.org	domain
94.26.106.206	ip
162.141.92.192	ip
64.89.162.149	ip
189.140.140.116	ip
176.65.139.62	ip
43.228.157.130	ip
121.37.40.52	ip
45.141.26.218	ip
108.165.95.8	ip
144.172.104.183	ip
18.210.115.110	ip
3.237.179.174	ip
45.90.98.63	ip
45.198.224.158	ip
45.198.224.89	ip
d1ba1635b2c381f7a1db7e153715a03e64af3bd7b358db447c49ca71739bf843	hash
d3e8b059b054542f0ed79519a4658bcd39a489e07472ab736f1622f5fb73b94b	hash
1ee33805aec6ee40b7a415ee84e256c0578523fc0c5ac8257f06639f2f8e9ed4	hash
e2f48bec4612aa28f584e515d170a5b125d39d395ced0032f2f5075e8ab3d0fd	hash
dc92065072ed7815c08f402351c3619c71345005aed0781abb9981559a6291c8	hash
06dea035f458f908366587704c8895e1139d55bf52633ba98d9e83cde968f7f6	hash
7f68a8b2105d0f0a8e9f9130df29d54ea95454b53dc5458a4561729efc295209	hash
14d10df40a75805c1efed1320cb2c298ae0b307708817db6be2e9fe4658fabfb	hash
6fffe6eb76f923ef50f88e832f1bfbb1e12b665ad8db0feca51cb612881dcc24	hash
8442db57c524e6c52d06c6557bf987e82ad1391d762e3f94cffe5555411375c6	hash
e9554f1587e6c4f49f8c3fe13c8e202c180261a2b1adec1c20d00c4655397a3f	hash
733e3ff7390f47d5ef9b9ba5d48eabf8d1010c50d46c4b3785fc75735d478114	hash
2bc1a87390b68165ab06a42405a529ee3c7a3f8dd03affafe5fb4af2552bdf57	hash
edba175e16d6d798af156ebc04736c35ccd714571476bd4d39a10f4543fa3189	hash
4c6ed91fe385a37d90a9c3c387a7fff5c76d0f9b6c14a474c93206387ecaf4c4	hash
e1c2c65aa32218028e75032392f0bdf3fa330b1cb2a411bc27717dc539627231	hash
db0359c7c397b41f21293314a0205bb951cacc5ef43f2b4050d3cc83e875fcaf	hash
a23e2caa4d9d208c263c5e7a6cd6bfb5d2faecbcacd584ba6a95e4647de2d4fb	hash
231a761f8f5ebf1beb6087318d0e59ffe42b19ad804ce1c790dc7cb8d565d612	hash
c36414aa888266c01b8f1773883c6b66808371d87877e637a23039dceb154389	hash

Another file to check? Run a file hash reputation check.