Skip to main content

Unknown Loader

Malware Family

13 175 indicators of compromise attributed to Unknown Loader across abuse.ch threat intelligence feeds.

Domains

12 416

IPs

42

URLs

174

Hashes

543

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (12 416)IPs (42)URLs (174)Hashes (543)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CCredit-Card SkimmerpayloadPayload Delivery

Associated CVEs (1)

CVE-2026-76461

Sample indicators

IndicatorType
prolocolucera.comdomain
loewenzahnundpusteblume.dedomain
yogajeany.comdomain
terapioghealing.dkdomain
clinicarenataroquete.com.brdomain
nordmann-automobilgruppe.dedomain
tipsforhealthy.comdomain
ireba.xyzdomain
deeperlifedc.orgdomain
gaspac.codomain
physicalliteracyforchildren.comdomain
pavellavicka.czdomain
marvinarrington.comdomain
xadreztui.orgdomain
kountryinnkennels.comdomain
spillets.comdomain
gracedanceacademy.netdomain
requiem.llcdomain
officialdanaygarcia.comdomain
commission-rebate-realty.comdomain
154.194.99.166ip
120.237.147.54ip
123.156.62.67ip
151.245.195.142ip
155.102.136.155ip
163.181.46.129ip
173.211.106.164ip
147.124.213.232ip
147.124.215.131ip
216.250.251.211ip
147.124.212.234ip
82.25.63.146ip
104.234.94.198ip
107.182.130.226ip
94.156.152.24ip
140.233.190.106ip
185.170.153.104ip
5.252.153.122ip
153.75.86.13ip
23.27.13.72ip
https://pub-22c5fb19472741eba9206c96fcd10f9c.r2.devurl
https://checkfivem.com/runtime/VC_redist.x64.exeurl
https://pastefy.app/wSWr71SL/rawurl
https://rlii7whf.6ifhpj.cc/DrhksHggnu0o1xk54djf8qek8/wcqdmexhavnicurl
https://rqharrrm.6np5ya.cc/DvbkeHjsj307qwg5odb48qjzp/cenmhueskkouuuxurl
https://merabs.pro/62706817.exeurl
https://xuu4nhf.6ifhpj.cc/DfhawHfirf0gun75s2ix8t7me/nmochieyhcgdowegurl
https://preenactable.comurl
https://a4lp.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.googleurl
https://70csneb2.6bqbxr.cc/Da7u8Halrm0emvf5p2rb8vpj4/fjvoqwttejoxdgjksbdurl
https://t.me/gerj_threuhurl
http://146.19.213.28:443/?h=146.19.213.28&p=443&t=ws&a=w64&stage=trueurl
https://spark0-mesh.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.googleurl
https://4e7.6vxere.cc/DitmyHwkoq0cauv5qx8l8kike/vjeuyfynrtsurl
https://pastebin.com/raw/QKQwYyHdurl
https://beschaffung-portal.de/api/cm-tokenurl
https://scan.cyberessentials.live/usersc/testfiles/macro/CEPlus.xlsmurl
https://h34l.627x9a.cc/Dyno6Hwdnx0fdz15y4d283x5c/wyaitrrgxlrddrgwurl
https://adobeevoiv.duckdns.org/url
https://merabs.pro/234097cf.exeurl

Another file to check? Run a file hash reputation check.