NetSupportManager RAT
Malware Family129 indicators of compromise attributed to NetSupportManager RAT across abuse.ch threat intelligence feeds.
Domains
50
IPs
64
URLs
7
Hashes
8
Threat types
Botnet C&CpayloadPayload Delivery
Sample indicators
tiqwtkmma.comdomainzbxcgtqt.comdomainnode66group.prodomaingoogle2oauth.comdomainmomsdodigital.comdomaindaskljtitaskastvv.prodomaindeoint.comdomainlobsterrakkos.comdomainkasmokitomaccito.comdomainostamioalkfjka.comdomainoficekoslosld.comdomaintomaskoslimsok.comdomainmxjxifkfkkffjjf.comdomainfopsadfposkdf.comdomainasmfmfmfmf.comdomaindkilkamajsiot.comdomainasqmvmastt.comdomaindjkmgndkjfgndfg.comdomainbcrfix.comdomainus-addnewdevice.comdomain101.109.237.93ip24.134.4.221ip213.130.25.141ip84.27.86.226ip200.107.126.227ip86.53.241.21ip193.19.242.55ip23.24.178.33ip198.244.197.118ip176.82.214.8ip199.36.81.52ip27.223.110.182ip91.241.5.44ip194.180.191.223ip65.109.104.71ip192.237.187.145ip171.15.198.101ip176.65.144.30ip81.85.75.204ip91.92.43.51iphttp://us-addnewdevice.com/Vzj72DFgvUe1Psg5urlhttps://us-addnewdevice.com/dl-callback/peevmnpz-psenf5s7-927uja3p-uey4ex9n/setup.msi/e5cdedc2f6f167f2bf343a5bb57aa7f6urlhttps://pub-f2969eb764264a9280dffa75e6803e93.r2.dev/setup.msiurlhttp://91.92.34.228/test22.txturlhttp://google2oauth.com/google.txturlhttps://cpajoliette.com/d.jsurlhttps://beroniw.com/hwkOP5urlb6d4ad0231941e0637485ac5833e0fdc75db35289b54e70f3858b70d36d04c80hasha9f1e873451adc5be1e9924d876ebaf79a467ab94b3f6a4e27068206f7b52719hash9d7f9ba8bde293ce8fc8b703ea016eda37bdb5726fa2f86f83e70d09fcef919dhash82c64ef8e028f5b58f3a61719792e82bc43fe01f8a6185700ff60b71943d97f9hasha5f7f39121b4fdf1d9dd9c2e8cacdbae1c00cd29383eceeea2cfb3b3a03187c7hash928ccfc1aed294c58960d22ec011f3a6730c1d35cf8d1d5cc54a408326636d32hash4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2hash6fa62584242262b5da8dab22c790e32cf84adae04d231c09d26aae689547a800hash