RedTail

Malware Family

267 indicators of compromise attributed to RedTail across abuse.ch threat intelligence feeds.

Domains

3

IPs

238

URLs

8

Hashes

18

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Associated CVEs (3)

Sample indicators

IndicatorType
kiss.a-dog.topdomain
proxies.internetshadow.linkdomain
proxies.internetshadow.orgdomain
164.68.108.70ip
209.141.58.166ip
152.32.130.136ip
104.207.47.232ip
112.18.182.202ip
216.26.241.217ip
90.21.61.108ip
90.9.80.38ip
195.184.76.170ip
167.172.152.94ip
192.3.16.60ip
180.232.31.158ip
45.3.54.189ip
217.154.61.249ip
71.226.150.30ip
184.105.247.195ip
143.110.165.73ip
47.77.182.54ip
209.99.188.240ip
195.54.179.244ip
https://217.60.195.113/shurl
https://121.176.14.102/shurl
https://14.46.136.77/shurl
http://107.189.3.150/b2f628/cronb.shurl
http://209.141.58.166/b2f628/cronb.shurl
http://140.99.32.48/b2f628/cronb.shurl
http://205.185.118.246/b2f628/cronb.shurl
http://b.9-9-8.com/brysj/cronb.shurl
f0aa83bbbd2c75e2f71ec16029ee5fcfad59f3a8efa30a500b815f0f6c18d987hash
ed23a8c75dc4f04acd8b68c51a0ebdb4d5cce6c06eed2451ebd0428a32d9df99hash
3f3a11bafabb1a35db913cfe51995f2e357d049e268860175876ae5a93d23892hash
3f3bf218089d1488617d37f8a5116bb2791eb39ce06a1b5bc9a4cdfe5e94dd39hash
6168f5d053f4c3d413327947c37b927a759b316d68ac341908695879edcda246hash
db7fc2fef4f644d06e378b426e9a5a5c5ac7c29fb0d09ba56903fed1dbe6843bhash
1dab38eaba06e088ad1eb6d5e7b541c84d1ef8b198d961eb61eb19cd62dcd068hash
a2344aa530706d76200c8c4fff2ba9b37791bee1d587ffe13732d21cd42524eahash
9875fb1a96f06fb4ffde6c24cbaaa15eacd9df8652756e25e6e13f125f2019echash
de96a56c5508bb69c20f171a141263ebed92823eb3249dccb9db1ff350b37b31hash
2c602147c727621c5e98525466b8ea78832abe2c3de10f0b33ce9a4adea205ebhash
b33b415cbee7d64d4cbedda4c61d97437393b6095d53f597b5ee247b16591b6fhash
ed8fe6eb98c8a487c631dee11ddbe11c322e446666280f7b97844d259fdb10f5hash
7c8e7619c5398d3b857e6f72cf791e2c2e27762ddd8521eb8971c893cdb8b1fchash
59c29436755b0778e968d49feeae20ed65f5fa5e35f9f7965b8ed93420db91e5hash
dbb7ebb960dc0d5a480f97ddde3a227a2d83fcaca7d37ae672e6a0a6785631e9hash
048e374baac36d8cf68dd32e48313ef8eb517d647548b1bf5f26d2d0e2e3cdc7hash
3625d068896953595e75df328676a08bc071977ac1ff95d44b745bbcb7018c6fhash