ValleyRAT

Malware Family

3 801 indicators of compromise attributed to ValleyRAT across abuse.ch threat intelligence feeds.

Domains

154

IPs

468

URLs

41

Hashes

3 138

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
hhskkmmtyust.cndomain
a24.auaacc2.vipdomain
windonws.comdomain
nbcockj.comdomain
td49t44g.comdomain
ur89t27d.comdomain
utuhv.cndomain
vgrdshuyyg.cndomain
whatfuck000.intermediate.cyoudomain
msthiyun.comdomain
cqbxbkj.cndomain
cdklskjd.cndomain
zzlkkghnmh.cndomain
hu.yunduans.comdomain
wwvsfkbjsdojfnor.cndomain
xiaoshihou37.orgdomain
pishjdaagd.cndomain
qqdhq.cndomain
afdm.scloudflareb.comdomain
whatfuck000.intermediate.icudomain
192.238.184.143ip
43.99.86.192ip
23.248.212.98ip
43.199.122.69ip
207.56.119.59ip
137.220.153.175ip
47.236.232.206ip
18.163.0.245ip
103.231.14.104ip
134.122.155.142ip
143.92.63.179ip
38.47.218.228ip
18.167.247.169ip
38.91.113.58ip
134.122.163.220ip
156.225.19.99ip
113.44.44.102ip
43.199.16.35ip
8.218.110.236ip
43.160.193.90ip
http://gxfsxs.cn:8880/getinstall64url
https://sweet-thunder-52f5.yenthi893197.workers.dev/url
http://95.40.222.37/getinstall64url
http://18.163.217.102/getinstall64url
http://43.198.235.91/getinstall64url
http://154.91.75.105/getinstall64url
http://withered-lake-8596.krzakanna172.workers.dev/url
https://still-block-4945.kubukushi4609-fee.workers.dev/url
http://95.40.215.140/getinstall64url
https://kaiwyrey.eu.cc/d/6f025f85e3c0url
http://osgyx.cn/getinstall64url
https://frosty-tooth-517b.erinbraumbachlianebl.workers.dev/url
http://autumn-mountain-e855.erinbraumbachlianebl.workers.dev/url
https://kaiwyrey.eu.cc/d/ac516096c285url
https://fragrant-shape-bd43.kucantoojd641.workers.dev/url
http://103.80.135.33/getinstall64url
https://mt-link.qdhuzf.cc/cl/a5UYfW_dao7L4uK02Y5e3T4RKwwLAq7x5FXAtyV8o3UJAUT_K5Ia0VIbWVrxBLXMNGzEK9WhhAhSQFoBqqCupKzzInKiHGMgGOcp1Yiigbo6JUPzwHm0YBF._JurP0LhKB4wt0m5H1gYc3aG149V2da397unkY11uVn30sF8DGJJMiZtmJS_UGZtI_JqupELrUzGNWj2gvSMSOq9_0IdaVJwLmuBiwllpHaogXqN4cKH--rCZGX49Rzqev4iXM--N6CY14rgI..iNc2Atg5k9g~~url
http://kaiwyrey.eu.cc/d/bdc9637e70c2url
https://withered-lake-8596.krzakanna172.workers.dev/url
https://mt-link.jiosjcjp.club/cl/XyTkjX7q1dAL2BGNTd9WS4rxd2jM6dRs81I6p9oIabEzdaoU.hKBV4joWBgjmpuG1R7lQFSw.ycTLHGORYhj2SUP3sFXpIV6xdCcBG0RXRfRL7UHgFuOXTo2My_iS7qkQfe3qQ9HI3LZ8Yxj6VNOgU8mxReAxoA9FexD3dTAKBOPLMZS2YwrHmsCeDNS3nLZL3Bu53l9rtzb6rmz2xWLsLH_YpqfyMFUI0e7Ac9xKG.C0r8~--qdLygJPqKgnky9Es--_CzsqbW_5cv2HhL6j7Dr3w~~url