Tsundere

Name: Tsundere indicators of compromise
Creator: isMalicious
Keywords: Tsundere, malware, IOC, botnet_cc, payload, payload_delivery

Malware Family

66 indicators of compromise attributed to Tsundere across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Botnet C&CpayloadPayload Delivery

Indicator	Type
23.94.252.16	ip
93.152.223.222	ip
93.152.223.158	ip
23.94.252.55	ip
141.255.164.33	ip
31.76.96.194	ip
23.94.145.121	ip
93.152.224.94	ip
2.27.248.232	ip
2.27.160.24	ip
2.27.248.61	ip
91.92.33.250	ip
91.92.43.196	ip
91.92.43.193	ip
87.58.199.75	ip
195.66.213.23	ip
54.244.240.205	ip
2.26.29.7	ip
31.76.45.234	ip
144.31.251.6	ip
http://sharecodepro.com/m/8752e5472b9a3a80/main	url
78fd9f6b07ff70988a907ebf151e140ec53a57a9335fb5389a3e9515d1bd122d	hash
923725b6bcb38ed64a192db425290ccf904113df230fe2f55816f780000dd296	hash
067703b46fca4a3917c021e81484dfbe0b1a121f86a6598f7756446faf937094	hash
66d7cb39b761ad53fb58b91166ece629232703b246f34ae1fa7de960450f2d44	hash

Another file to check? Run a file hash reputation check.