RevStealer

Malware Family

267 indicators of compromise attributed to RevStealer across abuse.ch threat intelligence feeds.

Domains

124

IPs

URLs

Hashes

141

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (124)IPs (1)URLs (1)Hashes (141)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

Indicator	Type
hub4.cdndock.click	domain
scan.journalfleet.lol	domain
health.duskpoint27.click	domain
pool8.reefapp.lol	domain
store.framecove.lol	domain
test.kilnteam35.click	domain
trace.novagarden.lol	domain
watch.common-store.lol	domain
queue.cdnbazaar.xyz	domain
registry.amberscreen.lol	domain
monitor5.roast-core85.click	domain
portal.framerun.click	domain
files4.jade-hub.click	domain
gate.voyagezone.click	domain
log.neonhq.xyz	domain
main.commontexture76.one	domain
meta.bench-grid.one	domain
sso.northjournal.one	domain
queue8.vibepulse.one	domain
relay7.apiforge.click	domain
192.162.199.246	ip
http://192.162.199.246/m2/6eq5gvOfRvNmCi54.exe	url
598dcd6b90c270e37ea2cfccb89e86fbe6850080c128ab6eace9b39e04f4936e	hash
2dd1d37b7c86db785e147e16bab9e084bb0928d624a97dc04b3a06c1c6288349	hash
d55a97b3c7eaba8b619a790ea9bac46ce8d48cf7553a970f00ef18a1107ff9a5	hash
69ae4249cc5f8109ac8474bcab14dd20d980ce0dc4541a04e6b2dca0d9bd725b	hash
69b4319a5cc5b29b02de4d4e7bd46e23c713acf27d34251f2c520ae40016be41	hash
f936063e21effb761e6da7a155463059e3ae16646db7d0bd83516e7e08eb908a	hash
0880c280f51a7c22fdbc5d15a4d13e1137d27003cb2775430023370082afcc58	hash
229d80fd9853a2a83073901f01b5d3413e116ad5d1683c8e90b47941b8f8b767	hash
0fe30256936c6c909fb0fb3ee48425a94dc11c1557cd05e1f3641b778a73fd1e	hash
4ce24ddf15280392b9f2c021d9b5467b3b034f4fcca2267d71dd5225667ac04f	hash
b15502493aabcb2aa6a314a94e6a02eac07c7545617018f85b7aac50d9491aca	hash
6906a1bdba988bc588d9bb4b6fb77d37f75d30587124ff46e704ae27a373ed31	hash
02a3557eecf24549b6020744b33f4b7f5390c20daba7a86e0104fbf0b85e3855	hash
91db162fba6210d1d869ca63a2b382a40ee106c14402fdd8dbeb24ab6af7f9e4	hash
c9067c5f7a975ad3861fef91b4e82d3bb754d7dbf7e0bc2b774ad23cc3a295a1	hash
acabede7ef8b0c5ed4a49ef82c58329ed97825e6d9a1d0c6d6425f3bb754cf5a	hash
0c07307073a423f29e95ec02ae8fec4dd12be91fba76cfa1774c9c5ac1ae21e2	hash
b7ddabb1121f903b205cad8afa06a74e10b769996f61cddf6702c097e40c7dca	hash
5e4aa2174e706863bf2b3117c1333af714da7a754b5b6cd26447cea3417070b7	hash
a11d04faa1f5221f5ccdda7482252f49c32a4773d136bbe40a16e6800d7c6d79	hash

Another file to check? Run a file hash reputation check.