Skip to main content

SVCStealer

Malware Family

166 indicators of compromise attributed to SVCStealer across abuse.ch threat intelligence feeds.

Domains

0

IPs

0

URLs

6

Hashes

160

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
http://196.251.107.186/svbia/post.phpurl
http://62.60.226.232/zpzp/get.phpurl
http://196.251.107.186/acovp/post.phpurl
http://196.251.107.163/bioxp/post.phpurl
http://192.162.199.186/usovp/post.phpurl
http://193.178.158.107/vbv/get.phpurl
d2f1a8cbd4f6e007d3bde6996d15c915be6081e1ab2d5290f5f50c9fe1b9cc27hash
4254de273cf58a956855203549ce4c6ffa2e0eba107d4a11e884f4ea064821d5hash
e7b857478af1b469447c525c73d83734f7b28396165c85c50d7af2b6ebbfdb86hash
bdca7eabc43d49ace207da10ffafcebbcd4fb26e4a779339878386953b5da6d3hash
74d69679f2b98d4a38f4bd0f17135792def5f6be81687ddc592dcd4c26e4f60bhash
9b59b2de9d11f32591ee6724778817cac6b026d4590acb28a91f61f72ece5e71hash
e228b521325b001cecf46224c8e96562hash
21665d2e3eba75d5046b86ed6196b84272d7a8020ecf4fcd8f4e85fb1a76344ahash
f7bbd2d0f72107e5ca9d98f16d024212c162ca3b29742634fc6e17203bc705cfhash
165d7f4bc117a2992cf91238066d570ec6e69b4325edcbe69017414792f0f84ahash
dfa531e1ac9cb7c6ca7cd7cd052c5a33af615cc4f8b1a8cf8a0cc85a1064c3ddhash
d08578232f63c06fa9a0cef8c78d32e345be95ea005809d8beb390810467947bhash
6370953f49bf9c07f989500b7f6a0d84f4fefaf8e002770cde236f7f494f48c0hash
16b1301aecdd958a7c899ab6f0839b1842e68abd0eb9f9ea6c2a8d652fdfc1cehash
bd035b082079a7cdce87e983f97a43d457d9921e71b90dbe66248e0e9abb6c2ehash
e98d11f2cb889c12bfb98b281ccbae6f7570e85fc8c44563ebef72156d114f3chash
0f1b3601c91c1a1de03108c26a491f567ad3c0603313e5b5b0f2a530984ccc92hash
657957b4c8ec055cb91dd6e00fb89174d653737ddfb6db63d77a7fbdb690f17ahash
3a297d846199ddff323b30eadb510daedbbd08a9e76949c06df09e1592dd0f02hash
1d2fc128c078e369cc50d038d1301cf17f48a70fhash

Another file to check? Run a file hash reputation check.