Tsunami

Malware Family

371 indicators of compromise attributed to Tsunami across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

354

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (5)IPs (11)URLs (1)Hashes (354)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

Indicator	Type
team.tesisquare.com	domain
securelogin.lpzoo.org	domain
rc.de-zahlung.eu	domain
rnd.exposedbotnets.ru	domain
irc.shadow-mods.net	domain
156.67.218.115	ip
151.106.52.209	ip
62.238.37.207	ip
188.245.99.156	ip
87.249.134.3	ip
43.133.157.218	ip
94.140.120.193	ip
103.79.79.21	ip
45.198.224.184	ip
64.89.160.222	ip
186.123.131.123	ip
http://45.198.224.184/nix	url
8621d8c1feb1a03a997782646c133a837c1bf1558590f4caff2e8270d613fc3e	hash
e20806791aeae93ec120e728f892a8850f624ce2052205ddb3f104bbbfae7f80	hash
a1f211877e5ac29682f07d0b97d02ee936ed02f3355b68d7163b3336164d85f6	hash
0eef04af376d3a676ae0dd4d372f906e2cb65235beff38c7f1db787b93b1e8b7	hash
07e61f83fb1edcd125f9b25902098f5b8cd61579e5bf50045f22533e09b7b5bf	hash
9997a529b4b91a9e22f39ead291f1fb969e61a5c2fca660b2b4786fc93c0f0ce	hash
0b83dcc84edf3920059b3bcb33e20dc08ed180b3465eb1e438c772253f4f3017	hash
751cc3b22fe346290630e3bdb80d41c558bd6b8493c8e8b7fdd6ce699984bb21	hash
061c66419681f328d2cfb355f7c1e5d7f4f8973c846e9d981df92329061f6651	hash
214e61bcb59f6d8b76362ae15e7fbaa36894b210d0baf84c9814f816dab7dffb	hash
b429c0696541ab00c2a93b87027254d1540d7d3ab01e51ba1d853ea1d9272993	hash
039704e9624f6695984a7963651e08485ddbe1c9c318af55f32d4f9c56a08bf0	hash
7b5b699825639a2cfe86150ea9f5bb16b74a77be122a06f88cd31aca0c66d5b8	hash
977f5a93af9590d7860f5b5b02ba3532bdfaef15a352b7c2bfbe6c7480b4b01e	hash
86d0b365f87a8fda44d605b072ff08fe349f95c70679461ac48e60933a120490	hash
6c2ddfac018f28f75d48bd9306e2202f439789fc0378acf082c39e168dc69034	hash
e088410e995c9ee2f51c45757bec3bb337ecda0b20cab9de1520bf892cd84da3	hash
2116aa386d5b5dcd00e46e70c450a30446f78e76b2d2c70647c53ac638eec810	hash
a64ddaa1e3747b10863af3b60e79bbef1295a71ffdf3dd15a390d5926a6c3c13	hash
4545ddd44249a565bdb5a661dd67e25a43d1978d45abf7db6d0b869bee1b0c45	hash

Another file to check? Run a file hash reputation check.