NetSupportManager RAT

Malware Family

384 indicators of compromise attributed to NetSupportManager RAT across abuse.ch threat intelligence feeds.

Domains

133

IPs

225

URLs

16

Hashes

10

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (133)IPs (225)URLs (16)Hashes (10)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
jakkakaskakasj.comdomain
golviewcheckus.comdomain
qerovantvcvba.netdomain
omarinjakuzzii.comdomain
boksopable.comdomain
channelmanagerpms.comdomain
baadeckyarns.comdomain
skadfjsdijfhsfso9to.comdomain
asmfmfmfmf.comdomain
kasmokitomaccito.comdomain
asfasfqwf.comdomain
tiqwtkmma.comdomain
asqmvmastt.comdomain
praxivono.comdomain
lomtophamchese.comdomain
beroniw.comdomain
plixoworks.comdomain
kfalospiro.comdomain
kislosflfkcjdj.comdomain
hotelupdatesys.comdomain
101.108.70.116ip
143.92.140.43ip
88.214.27.166ip
144.124.248.189ip
179.95.122.188ip
41.143.245.16ip
190.10.11.55ip
102.98.69.228ip
187.156.110.215ip
101.109.237.93ip
38.146.28.242ip
46.151.25.175ip
176.82.221.56ip
187.156.129.51ip
91.92.43.51ip
54.64.233.19ip
2.137.3.71ip
179.95.197.53ip
103.159.133.234ip
172.93.185.254ip
https://us-addnewdevice.com/dl-callback/peevmnpz-psenf5s7-927uja3p-uey4ex9n/setup.msi/e5cdedc2f6f167f2bf343a5bb57aa7f6url
https://mysite2-1iz.pages.dev/index/url
http://193.111.117.21/R.GREurl
http://google2oauth.com/google.txturl
http://verifyhumanbot.com/gggs.7zurl
https://cpajoliette.com/d.jsurl
http://193.143.1.21/fakeurl.htmurl
http://193.143.1.21:443/fakeurl.htmurl
http://91.92.34.228/test22.txturl
http://144.31.207.34/f.GREurl
https://beroniw.com/hwkOP5url
https://xrplnode.dev/xrpl.phpurl
http://us-addnewdevice.com/Vzj72DFgvUe1Psg5url
https://xrplnode.dev/installurl
https://pub-f2969eb764264a9280dffa75e6803e93.r2.dev/setup.msiurl
https://daskljtitaskastvv.pro/dsasfd555.jsurl
a9f1e873451adc5be1e9924d876ebaf79a467ab94b3f6a4e27068206f7b52719hash
9d7f9ba8bde293ce8fc8b703ea016eda37bdb5726fa2f86f83e70d09fcef919dhash
82c64ef8e028f5b58f3a61719792e82bc43fe01f8a6185700ff60b71943d97f9hash
a5f7f39121b4fdf1d9dd9c2e8cacdbae1c00cd29383eceeea2cfb3b3a03187c7hash