Campaigns / Malware / Family

Ekstak

4New IOCs · 24h
32New IOCs · 7 days
32Indicators tracked
1Independent feeds
2026-10-11 16:03Last activity

New indicators per day

2026-09-29 to 2026-10-12, by first report.

  • Hash28
  • IP4
  • Malware32

Where its infrastructure is hosted

  1. 🇸🇪 Sweden1
  2. 🇷🇺 Russia1
  3. 🇨🇭 Switzerland1
  4. 🇱🇹 Lithuania1

Latest indicators

Filter the live feed →
First seenTypeIndicatorRoleWhere
2026-10-11 16:03SHA256ae257e2b25f81238c1b3bc5d5522cc13e89dc6619d2d255d6eadec8dcb9da2fcMalware sample—
2026-10-11 16:03SHA256bd2c67b3bc7a2a222e6e6501c8f69e58db4f31adbc30eb05bc9ba9d84364a38cMalware sample—
2026-10-11 15:16SHA256c20156a6ff24cadb2f14b91550b67219d75fdf6eb5f949ef06bca7c22bca06b3Malware sample—
2026-10-11 10:00SHA2560f01b2ad6d8723a6d2195080d2fba1eb2e853510828e27c47299efa34956ef02Malware sample—
2026-10-11 00:59SHA256e3b403579391e8943fbb1a4cc6c6829caf15496341457b14e5315c16ba763db1Malware sample—
2026-10-10 17:31SHA256cbe0c96d6c2fd64314e2a405cfecfe1a7991574cbba77881ee5f6a23d4bf69f3Malware sample—
2026-10-10 15:26SHA256da196aeee0c47f345e86f907d2f26853bb38c6e5f0bc00a24ba7fefdda00a71aMalware sample—
2026-10-10 13:25SHA25605596201bc9aade4c1facb441867d105c93a378803fd9b90bd2c70bc7a0164caMalware sample—
2026-10-10 13:10SHA256f8358e56ee0449b667e048cfc83fc497d139f198b51f7fb45c42308c169a8d08Malware sample—
2026-10-10 12:55SHA25623e59609429b510357b79bba08c59cb3d1c33037a256a0a5e211fafb3f0b43ebMalware sample—
2026-10-10 11:40SHA256511d246a45e18802a775350575b5b29efc422f27ae0b55ae1a5fb6ff9a6302bdMalware sample—
2026-10-10 11:10SHA25619a445c9b28164e7a416c3655521ae714220036267787cb56482ebc1f6307c5eMalware sample—
2026-10-10 11:10SHA2569747f2e37167f0aab7c9c3caebee80ae35673ce51e78e333807a47fb4eb4f0b9Malware sample—
2026-10-09 04:37SHA2564f28e1d9cc3bb165612f50dbf8112b871942d5c992f1a608a727db1206b953e1Malware sample—
2026-10-08 11:12SHA25600e97537bf5cb7528146c96442a2e4363b6c907b6e6d7910bea349951feb1113Malware sample—
2026-10-08 10:44SHA256001c221e4b0bc2d53257545761e222bca505e9fbb32db9b373ca724dff059276Malware sample—
2026-10-08 10:44SHA2560036adb2553150054251393bdee733336082352072a6bcc3e179957044ea4980Malware sample—
2026-10-08 10:44SHA256013e2102cabe397223c1cd19fef363126207a3ee3d4ba833d92deee2013b4615Malware sample—
2026-10-08 10:17SHA25600216cd348dde13742f346610a3da3e95701b576ac0f9d09601ddc7203d15329Malware sample—
2026-10-08 09:48SHA256002c4d5cb6f4d809bfa58dcedc17387cb9828ed0b8f68f81c24e45a85b9ae582Malware sample—
2026-10-08 09:48SHA256007420efb39d8bb6cb6935d4c71c2ca9268dfee40ef378de6be4f9a66698eb33Malware sample—
2026-10-08 09:48SHA256010b5c10ed15e4dc75dee6b951b86c6ee2f387f3b09bdceba9b53bf7494f2212Malware sample—
2026-10-08 09:48IP45.155.250[.]90Contacted by malware—
2026-10-08 09:48IP152.89.198[.]214Contacted by malware—
2026-10-08 09:48IP185.196.8[.]22Contacted by malware—
2026-10-08 09:48IP91.211.247[.]248Contacted by malware—
2026-10-08 09:21SHA256001e8d71f8a17b086c2956769d06780fbc9e625897d0b014e1032263924a31f9Malware sample—
2026-10-08 09:21SHA25601d9e0db62c66e517af7732f66b310e0565c7bc158919820b4dd0719d617f559Malware sample—
2026-10-08 04:48SHA256c5b6dee4c042e62bea38cb3330467c8510a7ae8249841abec468a14f6e7430ebMalware sample—
2026-10-07 12:03SHA256bd256bcbb6a3842cc2ffbae80cf64f69ebe7d45c35c6c40eff0442881c6a3fa1Malware sample—
2026-10-07 00:33SHA2561dac2ef06f38bb990a986bbb0915cc2d9a2ad78d1d822bac3903729fe972a324Malware sample—
2026-10-06 17:33SHA2567d8862b4bab8c83cc94be697a17f3e7fd169e7d967ea4fd3ec8ab6282cbe7ba4Malware sample—

Defanged for safety. URL query strings removed.