Winnti

Name: Winnti indicators of compromise
Creator: isMalicious
Keywords: Winnti, malware, IOC

Malware Family

17 indicators of compromise attributed to Winnti across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Indicator	Type
0fca9dae54a7a55f0805a864e9d2911d727a6e274f4ddc9b5673078130e0f9e1	hash
161344ae61278e09eacb1c76508cda45555eee109e6d6a031716a096ab5c84f3	hash
8d855c28744dd6a9c0668ad9659baf06e5e448353f54d2f99beddd21b41390b7	hash
2db4adf44b446cdd1989cbc139e67c068716fb76a460654791eef7a959627009	hash
a5a4284f87fd475b9474626040d289ffabba1066fae6c37bd7de9dabaf65e87a	hash
758b0934b7adddb794951d15a6ddcace1fa523e814aa40b55e2d071cf2df81f0	hash
2f1321c6cf0bc3cf955e86692bfc4ba836f5580c8b1469ce35aa250c97f0076e	hash
e46fcaac5f65a410040010c338f2fc02d9ac0327344acab8ce5152529312c4ae	hash
66923293d6cd7169d843e26aade13896ce77214fbe256bd925d7b96187b2aa48	hash
4cfb1243e8b9e64424f3de3d2144ee512dadd07ba921e0ced38e58e836347c7e	hash
3b378846bc429fdf9bec08b9635885267d8d269f6d941ab1d6e526a03304331b	hash
cb4ea3bdac13139a42a28ddeee4b401e8df4fee8276732fb18ee1096e7a3e21a	hash
9c770b12a2da76c41f921f49a22d7bc6b5a1166875b9dc732bc7c05b6ae39241	hash
225c4f945e7f1d8296253654921c474e90829036ea0b4797ebbc9364604bf334	hash
cc1455e3a479602581c1c7dc86a0e02605a3c14916b86817960397d5a2f41c31	hash
ae5c7cfd8bbfb38b38772083bae721c77ac5698b2339148605e46756f0619da0	hash
6a9f16440b9319f427825bb12d7a0cda89b101cf7b8b15ec7dd620b4d68db514	hash

Another file to check? Run a file hash reputation check.