Campaigns / Malware / Family

Zbot

2New IOCs · 24h
29New IOCs · 7 days
29Indicators tracked
1Independent feeds
2026-10-12 02:18Last activity

New indicators per day

2026-09-29 to 2026-10-12, by first report.

  • Hash28
  • IP1
  • Malware29

Where its infrastructure is hosted

  1. 🇸🇪 Sweden1

Latest indicators

Filter the live feed →
First seenTypeIndicatorRoleWhere
2026-10-12 02:18SHA256d3842bdec2e626a468607c65a1ef913e66a0d7cd2901db8905e86ccec602387aMalware sample—
2026-10-11 10:00SHA256014162b9b548e0488d3b576cca0b5b022201689d0fbbda112d256c4686b7417aMalware sample—
2026-10-11 08:34SHA2561138e54ae01ddd228b48c61a6f1f2625778ab1e8dc3f9bba74d225c0325d6fc4Malware sample—
2026-10-10 16:43SHA25616778b5b048061f79592275813d6febd41964c8c5cf30053ae34b6134978bb3dMalware sample—
2026-10-10 16:43SHA256e3a3c71e8dc8e3110d124b2927cff93fcee02c9c6612d0a7b5b69b2904a933b0Malware sample—
2026-10-10 14:56SHA256ce0042ebed2084016eeec11d62d281ed8e9eeffd3df848c3ffd4c5b47823ae1fMalware sample—
2026-10-09 13:21SHA25631318dc8e4f2246d1c5217d71990a8ae24c7040f06680e7f55659fabfd42fc93Malware sample—
2026-10-09 12:54SHA256fcd38d5a592e63d9008621ffddfd32d0144720f5f59107a00853733166a3d617Malware sample—
2026-10-09 11:03SHA256bf9e9f17b77be3d7e91b8daf1f403cbded2547e7d668c17285aba17da68d2094Malware sample—
2026-10-09 10:34SHA25618a51f910f803dc52803c47886376fe6186c7524551fe0ba9b827319bea5e5eeMalware sample—
2026-10-09 10:34SHA256b8a8846d003e355a40991e03c7c9885e3ac0ee2fd57f75a9fa48dcff3749e76bMalware sample—
2026-10-09 10:06SHA256582ab4b93b6c3fdd435a5af7a2f267d40f24eecc6aeb77a16f257ea9673f0790Malware sample—
2026-10-09 10:06SHA256aa9763307849ff9d9a382a2dc7adde5729a4abf03d53753a800955d7f658f031Malware sample—
2026-10-09 09:35SHA25611a4c4a1ac0a7b8c50701a4c4b9b5d70da4ba7f7ed77e188fb8d6eff9b0c6f19Malware sample—
2026-10-09 09:35SHA25633cfd8eea093489a7d5888c2d4d73bede369038c8f6b0d22930df30e05422be2Malware sample—
2026-10-09 08:34SHA2560f64f5fd8749b90b966fd02342a2ad6681aa6805cde1a29d57267614cc6e7a2eMalware sample—
2026-10-09 08:04SHA256e9b99706a9b48b09974dd18c1af8a0e402ccddcaa0c91edf43fdd838128a7408Malware sample—
2026-10-09 02:02SHA2565701d75038a9fb5901c1487c2d1443a8d5043ef4eda573ddb059008b56de83a8Malware sample—
2026-10-08 16:48SHA2560b85dbb15af776e1c34f1edc66b52009f672b83b628edc55ed0a6aec361f6541Malware sample—
2026-10-08 04:30SHA2567a76c56f61217665af73cfd2bce69d445c9d0f2acac7631e395b212169d4ddd1Malware sample—
2026-10-08 04:15SHA2565ad1934939fe08cc0a4ce701e6054b05790da370965eb737f41475fd1c754514Malware sample—
2026-10-08 02:16SHA256a2c11fce8e5b680a6064053299f1670c58747771ce2d1208cff2f16556aff18dMalware sample—
2026-10-08 01:30SHA2566d15300bc3795ab70b4f2b586f7b81e31643997df69d15175758063ee3841859Malware sample—
2026-10-07 11:48SHA25632ff736060163855c22e11d63810535bfcea3752a4ddb0e2f0f7a1646cd42b1eMalware sample—
2026-10-07 11:48SHA25693c81a182185ee6319450bfc787c57542925165e15b46fa0219f5655d2e79a0fMalware sample—
2026-10-07 08:30SHA2560734b4066c343cc67c5302fb4f3aa1055ea46416738d1643982c28a934d75c00Malware sample—
2026-10-07 08:30SHA256db8fc39dbe7e22ffa0d2bbaf2d31ba93d7c6494656a20a8e9605cc656cbca6aeMalware sample—
2026-10-07 08:30IP193.181.35[.]173Contacted by malware—
2026-10-07 06:11SHA25601f5525b9843d6001374ee64a2364b2b552db3d86443419097d51c2b855403eaMalware sample—

Defanged for safety. URL query strings removed.