DeerStealer
0New IOCs · 24h
7New IOCs · 7 days
28Indicators tracked
3Independent feeds
2026-10-09 15:45Last activity
New indicators per day
2026-09-29 to 2026-10-12, by first report.
- Hash4
- Domain3
- TLS cert21
- Malware4
- C224
Where its infrastructure is hosted
No location data.
Latest indicators
Filter the live feed →| First seen | Type | Indicator | Role | Where |
|---|---|---|---|---|
| 2026-10-09 15:45 | SHA1 | 13308ac704a70154856b5f75ec3d33bd628be888 | payload | — |
| 2026-10-09 15:45 | MD5 | 156b6e957d1c8cfca30351e0b1bccd3a | payload | — |
| 2026-10-09 15:45 | SHA256 | a1e52621549b26c9ea46fdb4da21e159d2332fb0887c56ee317648597e99df63 | payload | — |
| 2026-10-09 10:48 | Domain | edgnltatqptann[.]com | Botnet C2 | — |
| 2026-10-09 10:48 | Domain | aeyibtnr[.]com | Botnet C2 | — |
| 2026-10-09 10:48 | Domain | anwhinweudee[.]com | Botnet C2 | — |
| 2026-10-08 14:33 | SHA256 | a1e52621549b26c9ea46fdb4da21e159d2332fb0887c56ee317648597e99df63 | Malware sample | — |
| 2026-06-15 17:02 | TLS cert | 22e028ce259e7584f4573e44594eced4214e6606 | Botnet C2 | — |
| 2026-04-13 09:48 | TLS cert | fddec1007b0bfffee14304afaeff19a985c3b4c8 | Botnet C2 | — |
| 2026-03-10 06:46 | TLS cert | 80c481f9b55d711b33854644fd736f4b642b42b8 | Botnet C2 | — |
| 2025-12-25 14:09 | TLS cert | 5afb5e6087c16b75b0bcf2a8aa2f1a530d333563 | Botnet C2 | — |
| 2025-12-25 12:24 | TLS cert | 93b9c85725b9f19295be8a265e241e56e777fc04 | Botnet C2 | — |
| 2025-11-23 06:25 | TLS cert | 12b35a8ec2b2eeeeca8cd423572a2a1e03325bdb | Botnet C2 | — |
| 2025-11-16 07:38 | TLS cert | 46c913de8c3b3fe59137578f13c8adb7477d8326 | Botnet C2 | — |
| 2025-10-29 19:59 | TLS cert | befed299361459614fee0539aebdf52c312d4e96 | Botnet C2 | — |
| 2025-09-08 12:23 | TLS cert | 7fe380dce0d47b1fc5af458dc0fbc4ef0dca6449 | Botnet C2 | — |
| 2025-09-02 05:41 | TLS cert | 2766c85396639bdc72a85dc88c656e466899fdab | Botnet C2 | — |
| 2025-08-22 15:16 | TLS cert | 1bab120329193c9d766a49c9e820bf4987091c05 | Botnet C2 | — |
| 2025-08-11 08:14 | TLS cert | 3977fc8a9c9b5c372786f65bdf7ad7fef6368e9f | Botnet C2 | — |
| 2025-08-06 19:43 | TLS cert | b746722ee79737ac8a6c97c3655f147b9259ec98 | Botnet C2 | — |
| 2025-07-29 07:10 | TLS cert | 4ca287ab97cc3a6496ae1ca25ceab5e9161d7318 | Botnet C2 | — |
| 2025-07-26 13:05 | TLS cert | feb3abae9fe1231a2ed790d6b7fd968e8593450b | Botnet C2 | — |
| 2025-07-17 05:50 | TLS cert | dddfbec8982a718e7f1e8bfb20aae4c57869684a | Botnet C2 | — |
| 2025-07-16 07:29 | TLS cert | 56b039889230707a21343300e8eb8734fa97edbb | Botnet C2 | — |
| 2025-07-16 07:29 | TLS cert | a112d4cda400091e566fde1e09997862f34aecff | Botnet C2 | — |
| 2025-07-16 03:58 | TLS cert | f96e9ed9ced56f39565f806f8ec00453d0f285c9 | Botnet C2 | — |
| 2025-07-12 05:54 | TLS cert | f8b3a1dfd86a936e14295defee8c8e960a764d26 | Botnet C2 | — |
| 2025-06-09 14:47 | TLS cert | 708aaca7794703f2de4ffe4b63e4863ec8d56446 | Botnet C2 | — |
Defanged for safety. URL query strings removed.