NeedleStealer

Malware Family

77 indicators of compromise attributed to NeedleStealer across abuse.ch threat intelligence feeds.

Domains

30

IPs

31

URLs

6

Hashes

10

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
jeremitulsads.comdomain
kileant.comdomain
macronex.newsdomain
mybananamoneygrammafon.comdomain
nafnifnuf.livedomain
poinsert.comdomain
qiekqweantyyr.comdomain
quinterta.comdomain
sfrevdsgd1.shopdomain
bebarterkaw.comdomain
bymeserv.comdomain
candymani-ager.comdomain
deepload.orgdomain
deeznutsinyomouthhahahalol.comdomain
diganaa.livedomain
drikkiianll.comdomain
focusdailymarket.comdomain
allremdeskriki.comdomain
dubl1allremriki.comdomain
dubl2allremriki.comdomain
34.117.242.128ip
31.76.103.233ip
195.123.219.75ip
158.94.210.192ip
178.16.55.234ip
93.152.224.75ip
132.243.212.126ip
95.179.181.208ip
104.251.181.138ip
89.34.90.31ip
95.81.77.88ip
93.152.223.199ip
45.227.254.161ip
45.227.254.53ip
31.214.157.161ip
45.151.106.204ip
136.244.100.54ip
209.17.118.17ip
158.94.209.204ip
87.120.104.213ip
http://dubl2allremriki.com/api/v2url
http://allremdeskriki.com/api/v2url
http://dubl1allremriki.com/api/v2url
http://woolvilli.com/api/v2url
http://136.244.100.54/api/v1/agent/wsurl
http://136.244.100.54/api/v1/agent/registerurl
31611a93846b3d2307c7640e5bf04416ce3b0d337db0db5f69cdb408ca3be5d6hash
7a43461961a2e4aa94b537b083b6ab090532857cbfe5a412efa142c637bc8f3ehash
ba09e7d844575315ac839b80e2e306a9f6dd6de5dad5c10e47074e741899765dhash
64d6925c0c945e4867e62a6218ab12415de10354471a99ccf32150b4efb36f8dhash
9768b7e31324805672cfcba91cf4d6da91494e9899db58f22da9dda6c91931d6hash
ed1d3f69fbbd5576c2ed8dba45ba22c4f6884eb311d4f6e389203846d512ec11hash
b3b1b40a09c8b7f32ce5e43675500091e300962130d0a881dca34273ce7ac281hash
c6443b07d46f07e2f41bc0314c9ddf6616862e71894a3dbea182dc53f9b655a6hash
0fc86211a5e23f1ae72edd5612dc550f93138ce5c607c7a68517ca26cb7556a4hash
94fc8f2c42dba35799a2d4dff80ffe2f9bead57ae9ae9f2bbdd897b4d381265chash