SpyNote

Malware Family

442 indicators of compromise attributed to SpyNote across abuse.ch threat intelligence feeds.

Domains

7

IPs

13

URLs

58

Hashes

364

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (7)IPs (13)URLs (58)Hashes (364)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
edpisblackbro-54955.portmap.hostdomain
fdg.kozow.comdomain
fapennybdj.localto.netdomain
justin-subcategories.with.playit.plusdomain
software-garlic.gl.at.ply.ggdomain
idi-nahuy.netdomain
her-workshops.gl.at.ply.ggdomain
38.181.2.53ip
188.132.188.214ip
146.103.41.49ip
108.187.14.101ip
102.217.238.0ip
160.191.182.13ip
178.215.236.158ip
188.163.112.25ip
95.156.205.13ip
162.19.169.55ip
45.33.120.118ip
188.212.101.133ip
192.9.175.87ip
https://cs9-korea.xxchangyou.com/url
https://junjun002.top/url
https://47.239.244.75/url
https://mecurry.top/url
https://47.242.207.99/url
https://47.83.238.253/url
https://47.243.154.43/url
https://134.122.194.187/url
https://47.243.157.232/url
https://ppio10.top/url
https://kke03.top/url
http://47.239.244.75/url
http://ora.aoligei.shop/url
http://38.47.127.96/url
https://facai069.top/url
https://amte11.top/url
https://amte02.top/url
https://amte05.top/url
http://mcypresss.asia/url
http://ustk.useevintage.shop/url
61ef15e9eccee437915a643c86e7f5049bcee9c439360a0a9cd4818adb98fb26hash
e7bc41c6d3677ef941dfc8eb4b571435623dab1e8c0681b6253c37725844b268hash
33d2ea973f861bb7c46397c4e0f9aedc37ef10fb8ab2f4090f35a335d86ef0b2hash
da4f59bdc91eaeaba238a8ba9602f7d5cc75f0892a92f5422e23b55accbbb2f0hash
deb2cc80a190e73d81758b738bac4e8f0f116b587b07d65ddc8b668f0b89b0bbhash
5a9a8ec923000486ddb4ef1dd4412d1586334f126d0a7522022d6c8f3d1b9d42hash
498b9dc568e47cd06099fbedb479e78556a7cd30a8cad589b003a77e09de2c52hash
6cae7dd0618ef01e6443c0e23ce2f01e2bc1e981598bf76c99b9b2e17ae920a5hash
841271e95e9ac8e2f246043a55d3b4470e8c54f652a6a92e2cc962db5716fca8hash
ea19a7030fed1c317793e9b92f3911e0ba42b1dc58e07ac36dd0e0a614a84109hash
a140917183b3a1e51dca80b5a0f87dc5dc6eba21bc4d53d328f9ba24312d6075hash
21b6b9c7262fe39d2f2ce49115c9c22f50d3e5b0b083a0f8c1ddd776c369ffd3hash
bb60355c7714fc835e1b92e25ca479a0f0a6b49cd3e849118b6def8a007d7661hash
8f1284f79223ba2ca05d83bd96d0bab0fa0fd2dc658ba6079b8b3abf02d82682hash
8db823579b803cbf74dff88e1f5f7be2ca74f4632d9853e330c493f6df2a42c1hash
8c969efed52d0710a6986d01ecd9d8f7a2483bb96ab6f94e7c6d122b98617352hash
350eb390f1b3623f3af2794ba2881573deec587254a67444e76073cf2325390chash
d4dd905273ddcf887378be462217582d6e78b57e7d105c80abebba43dbcc355bhash
9995eac0e17eb54f3b5bacc8499d9be6cbfdb8d9fc9d2cd150c292c789bec34ehash
6b1179c23a7502b4dea7f9bde7dde3d4b5b97c64f634ff3471a1d3d27390f3b1hash