Skip to main content

Tofsee

Malware Family

2 193 indicators of compromise attributed to Tofsee across abuse.ch threat intelligence feeds.

Domains

2

IPs

34

URLs

0

Hashes

2 157

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
vanaheim.cndomain
jotunheim.namedomain
102.220.160.58ip
217.60.241.31ip
217.60.241.48ip
130.12.182.79ip
157.20.182.81ip
217.60.241.17ip
217.60.241.14ip
46.151.182.19ip
130.12.182.175ip
31.57.216.27ip
51.195.111.212ip
217.60.241.100ip
217.60.241.8ip
176.65.150.25ip
176.65.148.206ip
204.76.203.165ip
46.151.182.245ip
185.218.0.137ip
192.109.200.250ip
194.11.246.110ip
e206cdfadd769d8506f7dde22b1a3277075506810b455f491ff08fd42707a0a0hash
f35b1ae58cab71aad27d04030391cbe9f1976faba35f409bf9d72898b317521ahash
26ee4c6ab5c6e6950273cbfc795b207c156ef4ce07acc3f364f9b98364588082hash
5daac2a0d46ef9966310f4fce682386de348ecf350f8140f0cfdec76e4b78b88hash
7b6d86f86dba668f82dca79af0b155760942a3632caca69971c285cc49f116a5hash
993435f1debf42e6f00dafc6dc2284db7e3fdc7b7465ae44acb6cf1696ed488dhash
ef34d726bb5204c17675e05011cee6131cca06ebe879971e926a3a2edb864d07hash
5ffda142aa321a2b5546c426a28403d7f19b51b88985c8617f11c04411489e30hash
21a5e8cf356706a639eee50ea97cecef91685eb906921245c314ac50950b9825hash
10cfb9e17b5bd1204298a805db3b1d30a746571f115ce7b23264a7539c94594dhash
0de1fe4a15950fdfc14f2f1da949008261ff62fd230ad7d9ee970587a8ee3180hash
4e95d3db7c7af21e4578abae6defcf9982387452d72d36fa667f782f7d20e6fchash
efec07fbc1d3df82dc8f39c152f8d74da43ce2df373166952c9a1db3abf4135fhash
549953d5db2a4646740e721e24ec1b7fa57ef6c4d72ffa32752b17d4a65c36e4hash
07c0c50a06e664e3b07f87e0e218c23ae17fa2069b09e05822bb5f6411381545hash
0d22cf9d297506c62abe75d1bd7221ae756a0499c3d0f2cb09f349670854af9fhash
bb60b4c41a6c6b2c03a26ed80eb7d43ee3904b5f3dd0a52e4a821a74fedb3501hash
aa55631f758db92cf673fa0cc63dc03781f3ad86ffa61ba31a9eb73140ab9de2hash
b114292f1f56baa59bcb4972abcf83ef2926790ed155eb820b9accc648ae5d02hash
c892e813df997166d481a2349a4b47bda23ffc6f6483967351f0680a7ea90db7hash

Another file to check? Run a file hash reputation check.