Skip to main content

SantaStealer

Malware Family

256 indicators of compromise attributed to SantaStealer across abuse.ch threat intelligence feeds.

Domains

20

IPs

1

URLs

4

Hashes

231

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
project-info-world.infodomain
newproject-newworld.infodomain
goldspins.clubdomain
iauhgubyag.rudomain
newworld-helloworld.icudomain
world-new-iope.ccdomain
bill-proof.ccdomain
multi-lumpur.comdomain
runniggerniggernigger.rundomain
seall-vernous.comdomain
fuckfuckioaeygiuy.icudomain
corvus-infra.ccdomain
laughing-octo.infodomain
fuckniggerspajeetsandkikes.icudomain
crispy-rusty.comdomain
ou3yrweygtbesw.icudomain
blyatblyatblyatblyatblyat.icudomain
velvet-parrot.comdomain
ruruurururururu.rudomain
angry-toaster.comdomain
178.16.55.36ip
https://goldspins.club/gateurl
https://t.me/gerj_threuhurl
https://corvus-infra.cc/url
https://crispy-rusty.com/url
6688239d3266236edc9f341a0e717f32a25905a3d0ce43a2668a67eb2f8843b1hash
a1dba924a7d6ff952c47433e4b372fdcac30066cda68311cad37bbdd35cbbc21hash
446f1cdf397e5372f456cdf22f17842649e1894d097d0a0bc6875d762095a482hash
f7686a11c32fd322dd9c466ef5157901b08ae047c856f0fb42b4858fef9ae8cehash
c7cd0e78fdf7064f85c20af3def4df27e370c62f5a8fd0e2c2815de1d3cdbf93hash
d76aa708f350b4a36453b357b500caf3626eac3a481284792f016f420c05f0b2hash
e93afe14f4200654c5949dddc6334396d0453991cb340b93d3cf4c9bc8ab17b3hash
56e06eeb1593d5b3136646ce9a5419cfabab19f054ed1e44b0a0119d5fcc68b7hash
971716d5e4ffe417036b5c64e75beab44c295c5f9b49005b60d37f2ae79972a5hash
5da61b3899b872509b13f7609f8fb471b4d2e67f20fcf0dc2adc755f2cce9eabhash
1aa1df929ec2ae17313108b77afad3ed644f1a6aa21978db86190959ab029b0fhash
f0ff28a1a832a9c376d77f547a9e61e044e21d33c61cdcba5648c58b87cf73b8hash
e1c045c2c33ca3843dbb245bc81d4fa21cf84212af0bca14a5ed16b2bee0239dhash
91021ef9c160a8ed04d5fd5b981dc54f0ea61ddaefe108d329f03278748579f6hash
dd3251010efac018f809ad69ed40ba2d30f32147692c25e83938236d13f2aafahash
bde88c4f174c60bc1a43c4e1c3d8e6c2fa67813bb26fe9fd02aa33da4a3fbbdahash
8f3ddbc6090f6bbb75805de8ca284953696e283b438cfa9a45c3713c6ebcb70chash
230212c075f002078b06b01c9a953b390dea05e2bf22a43bbd3c29d6c4bdcbb2hash
d5f7072f37da49fa1f349a21742b27741642a1f4c5f04ddd733667c94551ee60hash
981971db686e5a41abb733e19246a02f12d9f38d84c2b8b3a2f33f93aa5e5d76hash

Another file to check? Run a file hash reputation check.