Triada

Malware Family

446 indicators of compromise attributed to Triada across abuse.ch threat intelligence feeds.

Domains

14

IPs

2

URLs

6

Hashes

424

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
file.pushclick.onlinedomain
c.whatsplusdownload.comdomain
c.obwhatsappdownload.comdomain
server.fbsecurity.netdomain
rpif.ad-tracker.networkdomain
app.pushonline.onlinedomain
app.whatsplusdownload.comdomain
app.obwhatsappdownload.comdomain
c.pushonline.onlinedomain
h5.webser.sitedomain
c.whatsplus.onlinedomain
p.thelayzf.fyidomain
q.thelayzf.fyidomain
dubai.thelayzf.fyidomain
43.163.58.184ip
43.163.58.72ip
http://apk.gbwhat.pro/GBWhatsApp_2.23.9.490_gw_08_09_1510_sec_sign.apkurl
https://drive.google.com/uc?export=download&id=1HcFfTSeJ59rLIfby_DJTz0sLYvQV_a7Turl
https://gbwaaplus.com/url
https://gbwaaplus.com/download/url
https://www.whatsplus.online/gbwhatsapp.apkurl
https://cdn.gbwhatsapp.download/app/android/conf/gb_wakeup.jsonurl
4984c1617acd030ffcc8a0f79dcd77c3349802e86244cb42eb87de28e9831865hash
0e09f6fe4b1966f1a7f2ebc5b4e19032b3fbde348b8f0c04ee0712a64fd92f4ehash
4cbdd3ba5ff11327a6c400751f03b14eb0c578289d9433ba6dfadbeb695aded3hash
13467dfc0be4aa390a3b7b4873835c3cbcaad56e14e47545d4b205fedd86e662hash
1389b1493f4112938ae22e6a3ae595bc7a2bca19cd308f1b8b84899c5b8dcf37hash
1825427fd4dc930f0d257bac348060332d6a4cde7329df89beba02ffb3ba8dc8hash
1d216ddb50d1f68fc9158373266fa2107716a7d3b744bb48ec1c753fa651949chash
1a0a451e9a8fb20cfa1ba64acb6b2d44b835a2aa65de48ffd1f0489029e66cfdhash
58e5cfadc19d67be5f0ca4228db0f56e07be0ee041a16920f88b516596a7a4cdhash
8bb389922eb6fb5bc4ed06d8001c39a397ce99b6f3dd4d8cc8e37521884c3dd5hash
ea07019de92f3ccc04e2094a39a77e9c17ad9aaa7f8b60c1532fa58db53b2f4chash
f5827e3035e0560be1379a414fc25e94bb625e90743c24f13df0dd724b831596hash
ff7e99a78bdc252f29ec2608f951854280b983adafedb26c08c264df80697e89hash
d9515ae5e1c4107bea2c0f822c0f3f2a55cf98805335936c317684e27c5cda49hash
4094e57568aa9b3661faf34f14db5916c7f2032f93291acd93728eab4044f74ehash
ef3058513d8602821716b37128f30174022695e032dd459a6c892d268a46abfbhash
131eaf37b939f2be9f3e250bc2ae8ba44546801b5ca6268f3a2514e6a9cb8b5chash
2a7d4373f0b6d52514b86b173b5c5d42c7d9000d1004a61d9ca05cf27ed4d34ahash
08accbb0d504e7d92aa2434c90799f4715cc7648425878c7a4c80892d098cb47hash
7acec905a544fbe05839d2e9dbe799f5c13e11b58606679bee8c62d575741e62hash