RatonRAT

Name: RatonRAT indicators of compromise
Creator: isMalicious
Keywords: RatonRAT, malware, IOC, botnet_cc, payload

Malware Family

159 indicators of compromise attributed to RatonRAT across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

115

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (4)IPs (40)Hashes (115)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

Indicator	Type
xyx.wvxx.dpdns.org	domain
snapix.p7z.ru	domain
sleekdra.ru	domain
nitelume.shop	domain
158.174.50.97	ip
91.92.40.138	ip
148.224.63.66	ip
85.137.253.157	ip
80.76.49.78	ip
5.188.75.162	ip
45.61.178.220	ip
151.241.154.217	ip
16.16.126.52	ip
45.151.91.20	ip
87.58.204.146	ip
23.160.168.174	ip
40.233.123.172	ip
198.244.201.139	ip
143.47.53.106	ip
170.205.31.216	ip
87.120.187.0	ip
163.5.210.250	ip
20.63.75.128	ip
94.72.98.32	ip
fddc9cca767ef639b17d70374bb9ca9d5c6516f58b9b63cae86f593ced0f3b6b	hash
27c46d58c8ba4920f24d2f09140d93473f9ec148dd7e44f3260951ae8b5b540a	hash
16aa5e9cd33302fb4bba5f5fe61b9dcef4e6e1a777098985eca17e5a6f075234	hash
e374b8336651320fc54763299c3dc909edd65ff1659c8e675a0a71afbc4ffdd3	hash
e11e11a539182b79dc653767028a68a30b3e9cd2ff0dcc171f6ff7f0ec72d53d	hash
f1eadb3d345839b46d7ccdfc156c52a770ec123b4e2b6cde97152be11241b3b4	hash
782f3fe871b7ba7150232151b488ae8ee347b82d8b7d02efeb949cf86d3007ac	hash
c1e0aa4d0217a4d1adfa91caaad5d09a1278fec8102870fefae310bf1fe6168b	hash
7f3bd15f28219770ed74d8c46146b78b041c81b0c7f45f254967920b973528e4	hash
95ca1ad664de98c14a5d157e6bb7d5bc395fd859b59f1842047a937b984e987b	hash
88d541eceb31d21c154521bf785d8647db4871d8c5d460d96cffaa6f4995ddd4	hash
e6d1376ef19f9995b16284474a0844f8a45e5e7a4ae554d2375cf890087d2387	hash
bf47fcdff4292e8b888e25d14e731f604267f82f1a05fa41607f990ab9289e3c	hash
4fa6ed65b43cca4b293893b5652948ea52c12599903839f7f7e17ae632f6575c	hash
0014ec862e1467433926c6594be15ce281f77c7ecb9ef6959fb9a1eb5ec02c10	hash
4da90557bd724fee747a693df7fe07c2c6c6f7ed9a07a252ff498942d33c6343	hash
589490c7fc948a715e4be9191969df77b9efe5833a15a73ddf57287e2e01c080	hash
be2db69fbde37ce4b0dbd51a85cb18f78a1bfda70ef2f4ed7dcde75051f3659b	hash
aca1078490d18009171b614edaf5ba314d32ab77	hash
854a0834a7029c81f91b841116c16fbb196d218d196fe7b63b4f31b8ba17f12e	hash

Another file to check? Run a file hash reputation check.