Potassium

Name: Potassium indicators of compromise
Creator: isMalicious
Keywords: Potassium, malware, IOC, botnet_cc, payload

Malware Family

70 indicators of compromise attributed to Potassium across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Botnet C&Cpayload

Indicator	Type
hik.gettingheadfromduckysmom.st	domain
130.49.190.185	ip
89.185.82.38	ip
89.23.113.104	ip
87.251.69.145	ip
132.243.187.133	ip
2.59.163.183	ip
2.59.163.77	ip
5.181.2.8	ip
138.124.67.244	ip
147.45.116.130	ip
89.32.41.19	ip
91.92.242.19	ip
89.32.41.43	ip
31.56.19.70	ip
89.32.41.108	ip
31.56.19.111	ip
31.56.19.141	ip
31.56.19.143	ip
31.56.19.147	ip
31.56.19.149	ip
267a3c8ed021a0a52c29bf076617a0dfd5cd5285202b8d0bd9ad0712110ccae8	hash
e2529d4afa39ae4db2eb05d5176317c906289abf09660c75bdeec43e54c55aa3	hash

Another file to check? Run a file hash reputation check.