Skip to main content

SpyNote

Malware Family

443 indicators of compromise attributed to SpyNote across abuse.ch threat intelligence feeds.

Domains

7

IPs

14

URLs

58

Hashes

364

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
edpisblackbro-54955.portmap.hostdomain
fdg.kozow.comdomain
fapennybdj.localto.netdomain
justin-subcategories.with.playit.plusdomain
software-garlic.gl.at.ply.ggdomain
idi-nahuy.netdomain
her-workshops.gl.at.ply.ggdomain
38.181.2.53ip
188.132.188.214ip
146.103.41.49ip
108.187.14.101ip
102.217.238.0ip
160.191.182.13ip
178.215.236.158ip
188.163.112.25ip
95.156.205.13ip
162.19.169.55ip
45.33.120.118ip
188.212.101.133ip
192.9.175.87ip
109.122.18.50ip
https://2.56.255.159/url
https://47.83.208.201/url
https://liux16.top/url
https://host.vasslli.top/url
https://104.233.246.210/url
https://47.242.218.25/url
https://8.218.245.128/url
https://8.217.163.200/url
https://der03.top/url
http://47.239.244.75/url
http://38.47.127.96/url
https://facai069.top/url
http://beelinealisa.ru/url
https://facai063.top/url
http://korea.008009008.xyz/url
https://amte03.top/url
https://amte11.top/url
https://amte04.top/url
http://mcypresss.asia/url
https://alwinshop.cc/url
3fe5f80ea3576d4c563e97fa8890fe3d73e9836f75ad7aec3242a0785b345ba2hash
99f467c30f21644ce9d7e060330cafdf082c9798dc151226271309071c83c6e5hash
adb7cba1d60f35b90d8d178da2eac4a157e5d05f78914847584022cdf3c91afahash
5c01f7727c78dea9c89dccf92b01b4c45e69406e6462340779401497bf4d4589hash
bf586ec8ce8528d26ec491fa5864dc590cefae88da176246296bb849e226a0c8hash
482eb4aa6dc6f873063b7b6b5378bd052298cc6f8e60b6a5ddc9beba56d0b05fhash
d0c34a43a01f24ae3414a9fb9de7bdfd49264b38310051785d338a9f3aaeaa96hash
1f3f2390836cab26d37d7da933060387f1ce1a9e4c42aa90f0783e2033b32e68hash
b55a6c06af55de81570737a0a13c2e46c21a45be0cc43648368335d0495e996chash
1b43138e175960e1f6a8b6b8b93dc8b150c78fcb8509cc2fa5002623abc438fehash
33be0d70b080e48f4dfb63a0e36c81633cdd4c767ebcd462f1b1515f494a2e1chash
b49685e2aa967112f766b73f9b39cf6557e3f7ee77ac040d5823b91772be9766hash
99efa839e1a3458a70221a817403478f9ff858af9ffa7caef7a58c02ff02fbe0hash
7a449a292f2498734e22aa7f43857fda0d34f81910ffb8a85cd679eb9c3694dehash
4833ad8edd1209351e5dd5856369f3e5ec4edfbbefe96b8be9a09f4dd6dababchash
119cafc86fcec7d56685aa283cef488f45d5781c476bb12b3d1893307a4db5d6hash
c2a7d0ae4f95a2e2de81357948afad740f76c7a2fb7f77917316dd5d5f17d9cahash
6008975dfd2aaa07fcb307b12d0c8a273aa6f4882749e29bac1f29e26a035c8fhash
2f1279a9bb3c960113ff1e90c32e212eb3df2a1696dc344d76865a55c9a1c46dhash

Another file to check? Run a file hash reputation check.