RatonRAT

Malware Family

149 indicators of compromise attributed to RatonRAT across abuse.ch threat intelligence feeds.

Domains

4

IPs

36

URLs

0

Hashes

109

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
xyx.wvxx.dpdns.orgdomain
snapix.p7z.rudomain
sleekdra.rudomain
nitelume.shopdomain
143.14.44.170ip
158.174.50.97ip
5.188.75.162ip
45.61.178.220ip
151.241.154.217ip
91.92.42.99ip
64.89.160.222ip
16.16.126.52ip
138.128.243.228ip
45.151.91.20ip
81.177.49.127ip
36.50.135.229ip
40.233.123.172ip
87.242.106.13ip
143.47.53.106ip
66.85.26.91ip
170.205.31.216ip
87.120.187.0ip
84.98.112.243ip
23.153.36.72ip
4f1105e2fab5bccdddc7ec5bb3ccdf2446abdf35fa43815337e4380209b108d3hash
9e739748aecf8018fdb73f4d5abf6ca7335e5972eb1b85525eaf86f4a2c471f7hash
7ff17ae0309f554a8569e55e283e9e1a19437174df959bb9cc8d90b19ebf800ahash
e5a30896b5d6bcc2817ebf28e15604d1294aa088c8e4e0d306e2c3b9609ea2c2hash
78d9af2d6054ae1979d03b5031965f36d87de237821745a677f57907a73dca81hash
782f3fe871b7ba7150232151b488ae8ee347b82d8b7d02efeb949cf86d3007achash
d1153f654601bc77fd5839d463e0088ca38e28ebfddf556ebe511e0fb3dbf6f7hash
a69a3e149d3953527bf129af100268c7cd0b2b954b453024ed360efe8b79e26bhash
37b5b05b16bd471e6395cafe355c8abab118fe4693baa7e869036238c220812dhash
2b6ed5e201539bd8a9d407080e38cb9e50091395f4d077f21c0a3c6c4475a1b7hash
a7a7a887247db3707b5eb522d9530926aa6f0298ecff2dbb1d5e09e4949de07fhash
25b442da47743d5c195cdf6178248d2b1eeb5238d22341dc6a7fedfa5abdab37hash
0014ec862e1467433926c6594be15ce281f77c7ecb9ef6959fb9a1eb5ec02c10hash
74f8040595da1fdff46a398faad213ed15f14c19122c00246b6023f909bfdbebhash
ba977e14aa3aa2b2bb40cfc3c548f9feb2ace0b3ea51932bf1d6bb8fad6d2d5dhash
be2db69fbde37ce4b0dbd51a85cb18f78a1bfda70ef2f4ed7dcde75051f3659bhash
5a44e5b17566cb4f3f5e3b494953536388eb61f2aab0bad1f0e0be3974ff3cd2hash
3ef07367be035c6524b96fd552a57f309710b34bhash
dd5e6012f32aab4c61b485df7056b539fe7da45e4bd2267b972fd9dca45cf0b0hash
c627c22bb54f008a918429b9d66569f3f811540chash