Stealc

Malware Family

5 950 indicators of compromise attributed to Stealc across abuse.ch threat intelligence feeds.

Domains

11

IPs

213

URLs

391

Hashes

5 335

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (11)IPs (213)URLs (391)Hashes (5 335)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
windows-update-local.restdomain
cloud-flare-authenticator.linkdomain
cloud-flare-authenticator.clickdomain
svhost-update-service.casadomain
friendihelp.infodomain
api.nailproxy.spacedomain
spellmarketplace.clubdomain
ashpaltlonpro.comdomain
dakatawebstick.comdomain
uehfks.digitaldomain
777palm.comdomain
158.94.208.114ip
178.16.52.110ip
80.76.49.106ip
204.13.232.123ip
34.68.103.127ip
91.92.241.119ip
166.1.209.82ip
91.92.241.69ip
89.46.38.100ip
94.103.88.121ip
45.131.214.189ip
80.76.49.77ip
45.152.162.11ip
62.164.177.228ip
88.99.64.42ip
158.94.209.112ip
45.38.19.120ip
177.3.208.226ip
194.33.61.150ip
91.92.34.196ip
http://176.98.185.85/536fde2d792c4b27.phpurl
http://77.91.96.222:7777/gate/ed3b194a53b1d17525ba6396eeurl
http://68.183.108.129/6259fdc16222e061.phpurl
http://172.86.77.102/72cd883ebd748330.phpurl
https://svhost-update-service.casa/url
http://108.59.252.214/9290546939c94eebbdb2.phpurl
http://94.103.1.199/1e7cce2a32b54656.phpurl
http://45.87.154.30/86d110a6ca1786a5.phpurl
https://162.55.214.47/8569064d5363f710.phpurl
http://5.42.92.215/c36258786fdc16da.phpurl
http://5.42.65.52/9fd9dde806b954c2.phpurl
http://givesd.link/410b5129171f10ea.phpurl
http://23.94.145.194/82bea16070014e869235.phpurl
http://janmorath.icu/40d570f44e84a454.phpurl
http://aidandylan.top/3886d2276f6914c4.phpurl
http://94.232.249.208/b55459c10e99c506.phpurl
http://2.26.126.74/url
http://212.86.109.106/ae2e04e22dac63e2.phpurl
http://193.111.117.51/94a5dbd165044e85b88e.phpurl
http://91.211.250.247/f53d7360a78c678c.phpurl
05457cd30049b97d7904f20206912e1dfabd4f5831f721bfb8668c7f14e4f2edhash
55f1014c9332b18b45ee1a3f8e750900c3c53c0f5d94441a5cd889fc952383e6hash
9a2dfe9dbf3354fb20245f2ea2b210e1bbda08953243e6fefbf3b08e31fcf20ahash
f8820844564b14f463d21641304f68191cd75988aa88406bff0ed876876969e2hash
aa80ab3d660d0340897cc55f6a342cdfba3b67c2d7335315a371f7bd17cdd3fehash
33add8fdc604485c3b7bd8d82331848729ac654bdbedbfb73753ed6a2da26101hash
d075bbba29912ff7a321ee5dcb32159b9de8e27e716a1aad9ed52bb9d9ccc4a3hash
fa0e7de0b6f868af03165a9edba5e6e913c0226e9144a92a04d28b4b303d1eaehash
f10f771f0f413e3b37b95590a43dac259259e2edc6d40a6bdf7ac84e2a1fe2c4hash