Skip to main content

Unknown malware

Malware Family

15 979 indicators of compromise attributed to Unknown malware across abuse.ch threat intelligence feeds.

Domains

4 375

IPs

3 624

URLs

6 477

Hashes

1 503

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CCredit-Card SkimmerpayloadPayload Delivery

Associated CVEs (5)

Sample indicators

IndicatorType
tjaaioz32salcoj63ttxra6nfqggwbcezkzpwnhyoiwq5tuimzmsb3qd.oniondomain
maa2yprc5pldyr5hjn246hw7i66wdhglnostqgqkcbuh4vyyeos4xxyd.oniondomain
syrn.loldomain
proposal-lido.xyzdomain
mantle.zonedomain
gomoss.loldomain
herault-elagage.frdomain
zmqh.comdomain
seat.wiwgf.workers.devdomain
91kdy4fjnqtphj2.freedynamicdns.orgdomain
full-brown.comdomain
slurmitsol.loldomain
sex-reputation.comdomain
lutkdd.corpsecs.comdomain
criticalmineralreserve.loldomain
waronusd.latdomain
painel.guintter.com.brdomain
message.uljhs.workers.devdomain
simplecheck.onlinedomain
vosart.monsterdomain
148.113.222.246ip
87.120.126.146ip
15.235.224.224ip
67.204.14.198ip
172.174.58.179ip
81.70.236.111ip
15.235.67.123ip
20.243.82.8ip
148.113.206.224ip
115.159.152.161ip
197.129.62.225ip
87.237.52.176ip
69.62.125.171ip
45.131.214.241ip
159.223.225.237ip
20.223.13.151ip
102.117.173.26ip
143.42.196.228ip
91.202.5.107ip
134.122.200.153ip
https://bit2solutions.com/url
https://innenausstattung-mah.de/url
http://45.82.13.83/url
https://superform.sbsurl
https://zorbit.online/url
https://alamehedu.ir/url
https://cogni-path.net/ext-b.9423bd0b6b22.jsurl
https://fathomscan.icu/ext.56c92f70e1a0.jsurl
https://tndr-panel.online/api.phpurl
http://209.127.36.71:2938/juche/bongyeo/background/background.pngurl
https://www.consulentelavoropaghe.com/url
https://allurebyyvie.comurl
https://lenaganci.network/api/configurl
https://92dadu1.onlineurl
https://question-climatisation.com/url
http://198.144.179.82:80/1.shurl
https://support-cdn.t3.storage.dev/index.htmlurl
https://www.zoorning.com/zoom.invite/Windows/install-guide.phpurl
https://www.beltboutique.co.uk/url
https://litespeedcachecdn.com/verify?src=url

Another file to check? Run a file hash reputation check.