php.shin_webshell

Malware Family

2 005 indicators of compromise attributed to php.shin_webshell across abuse.ch threat intelligence feeds.

Domains

2 005

IPs

0

URLs

0

Hashes

0

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (2 005)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
hukydole.workers.devdomain
sopuly.workers.devdomain
kozyqa.workers.devdomain
144yhe4bol.workers.devdomain
kemoe69471.workers.devdomain
zusucuhe.workers.devdomain
fiwarice.workers.devdomain
gylalinu.workers.devdomain
zfpij29832.workers.devdomain
ouryu08785.workers.devdomain
fu55xztbq0.workers.devdomain
6p6vrq3y23.workers.devdomain
kfirv20437.workers.devdomain
sikapaci.workers.devdomain
qcrgn68549.workers.devdomain
wakoduja.workers.devdomain
mojuti.workers.devdomain
vhgicwxoo9.workers.devdomain
lemohuko.workers.devdomain
maroonermentrude.workers.devdomain