SantaStealer

Malware Family

253 indicators of compromise attributed to SantaStealer across abuse.ch threat intelligence feeds.

Domains

19

IPs

1

URLs

4

Hashes

229

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
project-info-world.infodomain
newproject-newworld.infodomain
goldspins.clubdomain
iauhgubyag.rudomain
newworld-helloworld.icudomain
world-new-iope.ccdomain
bill-proof.ccdomain
multi-lumpur.comdomain
runniggerniggernigger.rundomain
seall-vernous.comdomain
fuckfuckioaeygiuy.icudomain
corvus-infra.ccdomain
laughing-octo.infodomain
fuckniggerspajeetsandkikes.icudomain
crispy-rusty.comdomain
ou3yrweygtbesw.icudomain
blyatblyatblyatblyatblyat.icudomain
velvet-parrot.comdomain
ruruurururururu.rudomain
178.16.55.36ip
https://goldspins.club/gateurl
https://t.me/gerj_threuhurl
https://corvus-infra.cc/url
https://crispy-rusty.com/url
b73ac8e843eb449dec913af433b1c00b5ec71f11d6b248fac6bc88f72f7c13a2hash
91f30c13f56121fcfe46dc3c6a0cdfd48b6c93ad562058474a89b7568e2e6ccchash
91021ef9c160a8ed04d5fd5b981dc54f0ea61ddaefe108d329f03278748579f6hash
3f25afe7c666cd7b51c2343a58b93ee844da891df2372e66b75238fca8caf397hash
526ab999fb00cdd92ce229eb945274b15c26acfca62c40d2f5cc6aa259a979d1hash
8100da6f9b544d639eb857d99bf33ceadb31fad65c2e9c33aa8536d77f937230hash
c3c5c914f28e29d9df082774fe16d57f58d97fbab474f5afdac35eaecd3c0b4ahash
ab1bd7a0893b584709343cbf700348d2213b0373944cd6594782d73af1fd86behash
9c4b11ae65026fcc0484a885f8efb6e87f156d53b3ac01f7bd72bad58cf4d08ehash
74c331730686e50aa5c656e3369d7c2c0c953b6131c2f856191002e54d2c1ecehash
33ee116f4951fb7f8312c73039b91a46a84980c2733252ae7c43605e1a7e0bdfhash
a62c9af4e08d7d752397e14a97885c009e4f53b281f2ccc3a943eb808ea44cc3hash
db2e0a69bc58c30039fffa25ae521ae3ad0defcb2d488d0d7b3e66ba61cfd984hash
765c0ba1d5f663cd1895f15d6035f37f7d9d64ce9f5da476f8bad84cf9692e2chash
51fcfcce28187704a91597bd55209971c0f9e2da26ec3e79d48389b56c3b6148hash
df6e6392dd182395487766acac3a90d2ce7c08b3a7760a459524475b0c8565cbhash
a7d5ef5a618ec366bfd27c66e42602b24f512d64e562557b2cd762e1284e25aahash
bde2db917c40dba4f7d17cb508a3fe9d84e7b00453402c99db7929df7fa50e23hash
f3ce4cc31a498d67a0d8225189e591c6b5cb4121fef0cfe6d1ffe3b7cf104ea8hash
cc109a845c4e4a33e0316672af3bfbf4a589015a33846c3d1caaf7c6862fe6c5hash