Unknown Stealer

Malware Family

1,142 indicators of compromise attributed to Unknown Stealer across abuse.ch threat intelligence feeds.

Domains

1,053

IPs

17

URLs

69

Hashes

3

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

reefreak.comdomainayamprestonyonyalina.comdomainledgerlive.ldgr.co.comdomainlactantium.dedomainpriscilafelipe.comdomaincansdellsigns.com.audomaindivineafromarket.comdomainmadproxys.topdomainchinana5.comdomaindivisible.solutionsdomainpremierrentalpurchase.comdomainstpaulamezmaryville.orgdomainbhsaviation.com.brdomaingreenforcesolar.com.audomainallpurposerentals.comdomainzaneogle.comdomainwiseview58.comdomainsindsol.com.brdomainactivationlbanmastercredit.infodomainwww.professionalexamtutoring.comdomain195.222.53.130ip178.62.245.59ip159.203.95.70ip178.105.175.202ip135.125.101.1ip136.243.152.105ip185.165.169.57ip167.172.10.118ip162.33.179.91ip81.71.155.121ip151.243.113.33ip151.243.113.57ip85.209.163.250ip23.236.155.239ip13.32.241.67ip130.61.68.232ip51.38.99.224iphttps://cybervertex38.com/urlhttps://anvil-89.com/curl/b2ebd894810ccc6df1fccbceeaf09f5c9be6dbf3f8386c915b26e78c28ac3563urlhttp://homeinspectionsdelaware.com/curl/75ddfbae4fcacede52ef513ce634f82ad3d8358984b0bd49756cc8c50a55d501urlhttps://anvil-89.com/curl/db7bd4c559aa3fb93d63739f16264aae68c911adc95b9f97cc7529c52fd15a87urlhttp://silentlegion.duckdns.org/gate/create.phpurlhttp://silentlegion.duckdns.org/gate/connection.phpurlhttps://wiseview58.com/hjpjsp2/urlhttps://payforwin.github.io/desktop.htmlurlhttps://irahook.org/mods/api/log-downloadurlhttps://driftpress11.com/curl/bbaebdea08c804297a988ec4200424600767ddc94cacc38931f8c430ba93d3d0urlhttps://pinescope11.com/curl/80ee53d07eee377f78c6ecbc5b40b6936703eefcb6e40a79d7af80bb53d9f1a7urlhttp://silentlegion.duckdns.org/gate/config.phpurlhttps://sites.google.com/view/xbrewmacboeurlhttp://vacationrentalvirginia.com/curl/5b7250991558c1089d217b180d9418df77886996c22f8f319d7f640895e03381urlhttps://bebra-dev.pro/Bebra.zip?v=1781701742050&r=34m3tkurlhttps://sites.google.com/view/onemacxurlhttp://premierrentalpurchase.com/curl/5b7250991558c1089d217b180d9418df77886996c22f8f319d7f640895e03381urlhttp://136.243.152.105/api/telemetry/file-chunkurlhttps://sites.google.com/view/clau-deskt-ver-24urlhttps://breinsmas.com/url81deb32cde378e3886a7bfb6e0b9dff6dc34a5d0hashf250b75677d5e944e5ab5fbba5e04b08f3ba9354hash38fead1469cca1192eedb9dd2fc305ddbb15760771223891d8e7db1a7a8fe2eahash