NodeRAT
Malware Family20 indicators of compromise attributed to NodeRAT across abuse.ch threat intelligence feeds.
Domains
12
IPs
4
URLs
0
Hashes
4
Download indicators
Indicator lists for this family. Free and anonymous downloads are a 10% sample.
For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.
Threat types
Botnet C&CpayloadPayload Delivery
Sample indicators
| Indicator | Type |
|---|---|
| freegaten.com | domain |
| freegaten.info | domain |
| solidclouaps.com | domain |
| sendertokencf.com | domain |
| sendtokenscf.com | domain |
| selerscope.com | domain |
| inversivaldcf.com | domain |
| vrfideyoidnty.com | domain |
| cfintegrity.com | domain |
| mnsm.us.com | domain |
| appistartes.com | domain |
| solidactivate.com | domain |
| 185.122.187.55 | ip |
| 193.222.99.231 | ip |
| 185.112.59.64 | ip |
| 144.31.158.33 | ip |
| 84802194859b530dcb8e374b7970912f6a27ff5e97f2bec509e59b2dffcc6146 | hash |
| f25ba62c66bee6e6bb582064ffd048043015f3718a59fa8c56546d7998c420c0 | hash |
| 2db3900963de73e6b5e8a57b7f1779aa2a65e98f | hash |
| b97980c046ff56cd4393bc37bfea4db5 | hash |
Another file to check? Run a file hash reputation check.