Skip to main content

PureLogs Stealer

Malware Family

102 indicators of compromise attributed to PureLogs Stealer across abuse.ch threat intelligence feeds.

Domains

14

IPs

69

URLs

8

Hashes

11

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
logs.bestshoppingday.comdomain
voucher-01-static.comdomain
relay-01-static.comdomain
relay-02-static.comdomain
strang-02-static.comdomain
adobeartsia.comdomain
boltiviersoul.comdomain
benbeloorg.duckdns.orgdomain
office-rechnung.topdomain
small-morning-8be0.fsocietyandtools.workers.devdomain
office-rechnung.lifedomain
rechnung-lexware.topdomain
office-rechnung.icudomain
webdot.ddns.netdomain
2.27.62.140ip
87.120.104.144ip
23.146.240.36ip
141.98.10.179ip
46.151.182.159ip
203.159.90.151ip
204.44.93.88ip
158.94.211.212ip
5.101.81.172ip
64.44.131.64ip
38.49.217.221ip
216.250.250.88ip
5.101.81.159ip
5.101.81.224ip
193.93.193.92ip
155.94.163.11ip
80.66.84.164ip
198.135.50.152ip
2.27.62.208ip
89.106.83.156ip
https://weedhack.xyz/files/jar/Pjibf.exeurl
https://pullout.ezgateway.net:587/discordurl
https://pullout.ezgateway.net:587/filesearch/requrl
https://pullout.ezgateway.net:587/finishurl
https://pullout.ezgateway.net:587/pluginurl
https://pullout.ezgateway.net:587/userinfourl
https://pullout.ezgateway.net:587/browserurl
https://pullout.ezgateway.net:587/pingurl
2772367ba92f56742707532f951856c2525f31c8ca0a92412e957774b7c90e21hash
90bbefd7f59df783c656d143564b4f7b8a7fc7d76517325127d1b3f5a51b757bhash
9fb63f6266dfbc7b3cb527d19134c13f51c2c3080c5242756296f2a7a090a200hash
ca33eeabb9860584f49ff9a881de1fc6a218813d7bfbcbeae842fcb579ea482chash
d94a6d8e3d54432fcdb888a4f1e566f35c9ea8fc04381956f5e836da50390ee8hash
5963a9491c91eae44384e239284fdc74dc3db9ee1b13c24eccc516ece350df34hash
5f8849d726446a436c7d56709246a2981039840a8222b362ff6ad3c55df2f878hash
b51bc344759f9b9db3321ab0c07dc807b63bcc8d9ec028443e95eca5292ff5d0hash
32ead15908ca61088701ec6ee4c692658585746bafb52cce23c047d035fc91a5hash
ae5a7b4d6ac001e41a49833ea03abba64f33d49ea46d3e4875d18331c52eb6a8hash
538b96f59a98e8c1d667823317d893451dd16d3c7e75203a2bbb2f9eaac4d249hash

Another file to check? Run a file hash reputation check.