Skip to main content

Vidar

Malware Family

15 012 indicators of compromise attributed to Vidar across abuse.ch threat intelligence feeds.

Domains

1 580

IPs

623

URLs

5 638

Hashes

7 171

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (1 580)IPs (623)URLs (5 638)Hashes (7 171)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
agencement-luberon.comdomain
peachbro.bonddomain
xi3.13balien.orgdomain
hoachatvietan.comdomain
hms.xybcaap.my.iddomain
oz.5togel.orgdomain
pizzadoughrollers.cadomain
sig.ceramic.lovedomain
rrj.6666k.orgdomain
bo.177betwin.orgdomain
bat.gagahsm188.topdomain
bkm.iakmialor.web.iddomain
rmv.123ful.netdomain
sep.beras1.comdomain
mub.atvrent.comdomain
fwf.merahsm188.topdomain
cloud-safe.clickdomain
up.332toto.netdomain
wlcm.v-panel.asiadomain
getin.v-panel.asiadomain
136.243.116.60ip
37.27.204.215ip
74.0.48.37ip
95.217.125.50ip
5.78.91.236ip
167.233.131.186ip
91.98.106.140ip
167.233.174.147ip
135.181.233.228ip
89.167.51.54ip
167.233.67.224ip
65.109.246.245ip
176.9.118.53ip
89.125.37.85ip
46.29.26.61ip
167.233.139.3ip
77.42.49.74ip
45.91.169.81ip
178.105.3.9ip
178.104.123.110ip
https://bi.86idn.com/sd/url
https://jx.78royal.org/gz5url
https://aj.7dewaslot.org/t6url
http://dhzuadd.hellothere.sbs/url
https://y1.6r6r6.org/tdurl
https://rnd.sm188daftar.cfd/url
https://scd.aasscc.how/url
https://t9.77tuna.org/ywurl
https://m.6r6r6.org/reurl
https://n9.666iapk.net/nxurl
https://167.233.40.16/url
https://iy.888-fw.com/crurl
https://2.29.13.241/url
https://p.73kcom.org/rc/url
https://65.108.13.120/url
https://e9.73kcom.org/yw/url
https://t9.77tuna.org/n2url
https://cq.777wins.org/vyf/url
https://bob.6666k.org/url
https://pg.369jk.orgurl

Another file to check? Run a file hash reputation check.