Campaigns / Malware / Family

Gandcrab

30New IOCs · 24h
228New IOCs · 7 days
228Indicators tracked
1Independent feeds
2026-10-12 07:26Last activity

New indicators per day

2026-09-29 to 2026-10-12, by first report.

  • Hash125
  • IP103
  • Malware228

Where its infrastructure is hosted

  1. 🇺🇿 Uzbekistan42
  2. 🇰🇿 Kazakhstan13
  3. 🇮🇷 Iran11
  4. 🇹🇯 Tajikistan7
  5. 🇷🇺 Russia6
  6. 🇷🇴 Romania3
  7. 🇰🇬 Kyrgyzstan3
  8. 🇮🇳 India2
  9. 🇸🇨 Seychelles2
  10. 🇺🇸 United States2
  11. 🇩🇰 Denmark1
  12. 🇲🇽 Mexico1

Latest indicators

Filter the live feed →
First seenTypeIndicatorRoleWhere
2026-10-12 07:26SHA256ab6963cb5658ffcec2bb529eac84332c9630c89b922e6dc2c0fca7d0748329c5Malware sample—
2026-10-12 06:32SHA2565e1a0a02630065b306567259609fc2f2752088173294a68eb030865f5b7c9892Malware sample—
2026-10-12 06:32SHA256cc11cece1202c00154184121bd76af148f0ab98ae75af63c7bec173441062dd5Malware sample—
2026-10-12 03:45SHA25682f0a6f044bf1a055839e8ce32ce4d8ea4f8fcf860d05dabebe6c5e6a7059b5cMalware sample—
2026-10-12 02:30SHA2569b2ee0e64156706f7acf97b14f208df2fb713caccf35db7de0be490c5bdaf34dMalware sample—
2026-10-11 15:16SHA25666a504a361af9ca603dd55354e7700130a6965a225da0d05eb2b5fd278a0c6faMalware sample—
2026-10-11 14:43SHA2566bfa273d95f33979f3e8a32d7dea150aeebba8dceb398547366920e4718902a7Malware sample—
2026-10-11 14:43SHA2567cb35894601adbd94c90249e79bbd0a78559910ce3004db47801abb5076332a8Malware sample—
2026-10-11 14:43SHA256eabbde941fb479cc758e84e0d9005680a742ec6b1b43810fa50d230d1caea9a9Malware sample—
2026-10-11 14:27SHA256483ce7fd6ae225c6aaf26844f349aa4f6c5c8d5ee9e6a7d639c9c81aa3baf958Malware sample—
2026-10-11 14:09SHA256285335c1a7844028718a9b5a93efd92a9c487514cd66c76fa04edb380b2471faMalware sample—
2026-10-11 14:09SHA256bb9aa8c67c2b3bc8b21a63e04dacb57351c438db3a61b6033c50ac1b0a49cad1Malware sample—
2026-10-11 14:09IP208.100.26[.]251Contacted by malware—
2026-10-11 13:54SHA2565556c5398762c8cdf6150f9d643274c53f3286806c146c70f5d9b439593aba74Malware sample—
2026-10-11 13:54SHA2569d87b818628835bc313d7e50ba59c9c48f6d397b15ccdbe9f6fafb990e2dc48fMalware sample—
2026-10-11 13:36SHA2568986028452b472612e81acd57a6d1e7f6d9816512078f7ab97bc63c4ed5f4416Malware sample—
2026-10-11 13:36SHA2569058bf35cf7f0b1c56a4032f64398b8e8cd433fa4f6a6bcce93591a2e2b45826Malware sample—
2026-10-11 13:36SHA256bd71c9e428f45ffb94f648872b6d7c93a01ae0acaf061793a40e85602368101bMalware sample—
2026-10-11 13:20SHA256498e12352ad5c05c7cda47022afbc4794f88548e96479fbcc88dd117631f1c48Malware sample—
2026-10-11 13:20SHA25655c544769fc3b61f108960e6b1943946e1679a7a323a94dc1d99b1930369e1edMalware sample—
2026-10-11 13:02SHA25660fbae46a9245d64f9b45a527761028f69aaa0e3c9f75ed57186c6e31fa90770Malware sample—
2026-10-11 13:02SHA256db31a743e188241e77d5fffaae61ac526afc9ea0aad7fa9e93b4188bfbc6b9b6Malware sample—
2026-10-11 13:02SHA256debe4bb8f834e5ad4af4051878266c8aeabb812fc8651272a799c2d70b85aac4Malware sample—
2026-10-11 12:44SHA256818dd279dedf7a049ba10d1e2e6605f0d2dabdc6bc9b57cfd88b7e93f5ea1a10Malware sample—
2026-10-11 12:44SHA256c14b754be782a5cc6866e5ca02f4f458f4ede980e0a8b6d41a7fe83b985093c4Malware sample—
2026-10-11 12:25SHA2564e18027096a6adf85455cc67b55275bd9092129b448f3380970f4c724ed6921aMalware sample—
2026-10-11 10:00SHA2566b5c29b03202896235bb9587b0352e21b8bc85884dcafa3e7ef5056c55e043c1Malware sample—
2026-10-11 09:38SHA25614caba0f14f3dc95bef58d059796b4f4e8951294c09e2f1a7b87f01fb2a555eeMalware sample—
2026-10-11 08:56SHA2564cce69e1d305f0100769f4a4a0ba360ee6104e18419c43ff30a2e4454036700cMalware sample—
2026-10-11 08:56IP185.215.113[.]66Contacted by malware—
2026-10-11 08:34SHA2565b9cd3c0224c6a2fc288e10faa2c9a6fd7cea836bf244b5fbc328e7eceb5cc5dMalware sample—
2026-10-11 08:34SHA256c1c73c74a0274534433d131e6a9ea9be99b9b9e2183919b5b81019eb73a1d6cdMalware sample—
2026-10-11 08:34IP146.70.80[.]37Contacted by malware—
2026-10-11 08:34IP146.70.157[.]241Contacted by malware—
2026-10-11 08:34IP45.248.160[.]159Contacted by malware—
2026-10-11 08:34IP217.30.171[.]37Contacted by malware—
2026-10-11 08:34IP91.202.233[.]141Contacted by malware—
2026-10-11 08:34IP193.233.132[.]177Contacted by malware—
2026-10-11 08:34IP185.215.113[.]84Contacted by malware—
2026-10-11 08:34IP212.42.103[.]24Contacted by malware—
2026-10-11 08:34IP217.30.170[.]9Contacted by malware—
2026-10-11 08:34IP213.230.91[.]15Contacted by malware—
2026-10-11 08:34IP212.112.115[.]77Contacted by malware—
2026-10-11 08:34IP145.249.227[.]150Contacted by malware—
2026-10-11 08:34IP213.230.80[.]12Contacted by malware—
2026-10-11 08:34IP93.118.99[.]152Contacted by malware—
2026-10-11 08:34IP213.230.127[.]140Contacted by malware—
2026-10-11 08:34IP95.59.171[.]222Contacted by malware—
2026-10-11 08:34IP37.120.247[.]6Contacted by malware—
2026-10-11 08:34IP195.158.22[.]4Contacted by malware—
2026-10-11 08:34IP14.139.242[.]251Contacted by malware—
2026-10-11 08:34IP176.113.245[.]27Contacted by malware—
2026-10-11 08:34IP95.142.87[.]201Contacted by malware—
2026-10-11 08:34IP212.112.113[.]76Contacted by malware—
2026-10-11 08:34IP146.70.53[.]161Contacted by malware—
2026-10-11 08:34IP77.244.144[.]31Contacted by malware—
2026-10-11 08:09SHA25608e3af26ff393b82c3f209b3f4377fc109b444f87cc58f2d7385d7146d33af97Malware sample—
2026-10-11 08:09SHA25628a86f05cad2a9c4cbd27ba297e7c71cd1f25606c65a0f672360983c049e7e3fMalware sample—
2026-10-11 08:09SHA256ac10088128c9a00f956a89a03c79d0ef9cc9d5863aec40a3a86e1ac458ca919eMalware sample—
2026-10-11 08:09IP198.163.193[.]6Contacted by malware—
2026-10-11 08:09IP90.156.160[.]10Contacted by malware—
2026-10-11 08:09IP95.59.12[.]46Contacted by malware—
2026-10-11 08:09IP93.117.33[.]115Contacted by malware—
2026-10-11 08:09IP178.91.91[.]13Contacted by malware—
2026-10-11 08:09IP89.249.62[.]14Contacted by malware—
2026-10-11 08:09IP86.62.3[.]154Contacted by malware—
2026-10-11 08:09IP213.230.126[.]39Contacted by malware—
2026-10-11 08:09IP89.236.219[.]80Contacted by malware—
2026-10-11 08:09IP45.150.25[.]234Contacted by malware—
2026-10-11 08:09IP82.194.13[.]1Contacted by malware—
2026-10-11 08:09IP195.158.20[.]27Contacted by malware—
2026-10-11 08:09IP213.230.99[.]253Contacted by malware—
2026-10-11 08:09IP91.218.161[.]58Contacted by malware—
2026-10-11 08:09IP77.240.41[.]3Contacted by malware—
2026-10-11 08:09IP213.230.71[.]228Contacted by malware—
2026-10-11 08:09IP195.158.22[.]11Contacted by malware—
2026-10-11 07:45SHA25605978236a8d700db79ab2a4c7477a4a18b5949e9886be04881929a78ce3fa795Malware sample—
2026-10-11 07:45SHA2561b38890aaf9cd411eb8bb2b77582d39695ddd71109c24b4d7ecbe9e639a46fcfMalware sample—
2026-10-11 07:45SHA256633aa3972bc94650b8767a9c5a265db6c328b84485724970d66a74eead2ed101Malware sample—
2026-10-11 07:45SHA2566dc915b9e84a527b6942be4c1bb5bed9cfea69f1c64756c9b3f1cc8d213717e3Malware sample—
2026-10-11 07:45SHA2567490933736fa81acec22704242c949488abcfba1f9c59e3145928d379778cb78Malware sample—
2026-10-11 07:45SHA2568db4ac373b0c7ae06ad4bf39eaa66d31b702c818e7f7460feb4ec567401144a5Malware sample—
2026-10-11 07:45SHA2568e6006bdf6479220d5284668c98a44b048f313d0535e1e3b4ce9445ac736542bMalware sample—
2026-10-11 07:45SHA25699945df9365701bef2f9eaee61c3e6214707bc72f658c6938d338ca6264fa4f1Malware sample—
2026-10-11 07:45IP213.230.97[.]227Contacted by malware—
2026-10-11 07:45IP87.237.238[.]71Contacted by malware—
2026-10-11 07:45IP87.237.233[.]41Contacted by malware—
2026-10-11 07:45IP92.46.218[.]138Contacted by malware—
2026-10-11 07:45IP46.100.164[.]239Contacted by malware—
2026-10-11 07:45IP213.230.127[.]60Contacted by malware—
2026-10-11 07:45IP213.230.121[.]128Contacted by malware—
2026-10-11 07:45IP93.115.124[.]164Contacted by malware—
2026-10-11 07:45IP45.150.26[.]122Contacted by malware—
2026-10-11 07:45IP213.230.99[.]119Contacted by malware—
2026-10-11 07:45IP87.103.250[.]103Contacted by malware—
2026-10-11 07:45IP77.91.77[.]92Contacted by malware—
2026-10-11 07:45IP213.230.90[.]222Contacted by malware—
2026-10-11 07:23SHA2567c8271cb69c84c13d8135337f127b6296ca1ad19808509d75d44ac7f08e12718Malware sample—
2026-10-11 07:02SHA25603c28e20f8643bae8c706c15d3117459c0d16552c6326215f26205684f94f5bfMalware sample—
2026-10-11 07:02SHA25629d9435ebb3a3a69686bb6f3a64f72f939a712ef7357959809a358f5d4159922Malware sample—

Defanged for safety. URL query strings removed.