Skip to main content

Triada

Malware Family

446 indicators of compromise attributed to Triada across abuse.ch threat intelligence feeds.

Domains

14

IPs

2

URLs

6

Hashes

424

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
file.pushclick.onlinedomain
c.whatsplusdownload.comdomain
c.obwhatsappdownload.comdomain
server.fbsecurity.netdomain
rpif.ad-tracker.networkdomain
app.pushonline.onlinedomain
app.whatsplusdownload.comdomain
app.obwhatsappdownload.comdomain
c.pushonline.onlinedomain
h5.webser.sitedomain
c.whatsplus.onlinedomain
p.thelayzf.fyidomain
q.thelayzf.fyidomain
dubai.thelayzf.fyidomain
43.163.58.184ip
43.163.58.72ip
https://drive.google.com/uc?export=download&id=1HcFfTSeJ59rLIfby_DJTz0sLYvQV_a7Turl
http://apk.gbwhat.pro/GBWhatsApp_2.23.9.490_gw_08_09_1510_sec_sign.apkurl
https://cdn.gbwhatsapp.download/app/android/conf/gb_wakeup.jsonurl
https://www.whatsplus.online/gbwhatsapp.apkurl
https://gbwaaplus.com/download/url
https://gbwaaplus.com/url
f738a1baafa6fe80e31473b3789db597b7b865a7df4b9266f6c6b79f1eef13bbhash
201babe615bb2f7414a8c4835b366f67a567b47647ae4e45ab79f4ac43b3e847hash
4020e4fb0223d1e9e77cc8f62d5a164936c2378d257668563675adba7c64cebbhash
68dc44ae98982b7884babe3e43aced44a77ea86682bac3e1519a5aae44b0fcbbhash
12de27788ff089d827775fb562f89c1793122de3c7acc7bc0625c8a6496b1238hash
b923f4aa155d56ef6ed4640ed2965dc1993bddd941ffe1381579976de38ef809hash
d6551b783f9934d42c253fb412c99a08f20603b5f2348deaeb35a5232f2d874chash
0e8988cedb58d0dd96e383883e51aa02d2443c8ba3a33c6b635a36894edbb394hash
dd840ffa33510e57f44f0b2373d067937054cb7ec934ef13a6a4b2264cc2fb28hash
108f2a72f7893e548fceab29a6ec2757bd446a85653398ead38d8e9398d78a32hash
cabba4a9d66895bb4c9153b4b4ca997b7150ee85b79c69f4028e70f8b0d4d4c3hash
d7d5c9a3525005ca5a9ea67eb81bbe0b27d46833a6fc7bf51a6202ea2de2519fhash
3600028d15720865cc9f27db526ad40dd364d0e638501c266fecde90583bcefehash
6e1fd3355aa57043be674431fc852e4545a3286bf3de2157a2acfa2a22aee5c0hash
5fc319e749adc857d771264e519ae85a8ac0bce591899f7a9bc8ed9ad8683857hash
b655462193791fabee60c09ed23a4ed7cae92383f1fcfcac1540b80748e82648hash
720fb5fb4f8f94dde9c055b9c20f429f1e81648af5ee2ad1d04df67dae5124echash
c426daade9bacef035bbb1313f7e671ca5fae400d756670a869465f90acdd0c6hash
778450b6feadaefe32fa91a187d37cd088a6d38eced69b0f5f074acf4a656b69hash
219f57bdaa806eaabe251510ce1d24bc59fe963b5d88083d5398cb1c24e75a14hash

Another file to check? Run a file hash reputation check.