PULSE NAME
IOC-List ValleyRAT, Feodo Tracker, qakbot, etc.
WHITE wirednetrunner 2026-04-21 Modified: 2026-05-21
9
IOCs
LOW VOLUME
The following is the full list of entries from the Feodo Tracker Botnet C2 IP Blocklist, which is used by users to monitor and track the activity on the web and on social media, malicious urls, domains and C2 for ValleyRAT.
Indicators of Compromise (9)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL hostname domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 724caac6aa06eae43a77b0196517649e MD5 of f67de46dba3372646039167ec5fd8e66ab0b923997824a56b86c39a5af87f525 2026-04-21
FileHash-SHA1 0c13b467b8d7af52e73f9df8db37eddb880c50ff SHA1 of f67de46dba3372646039167ec5fd8e66ab0b923997824a56b86c39a5af87f525 2026-04-21
FileHash-SHA256 f67de46dba3372646039167ec5fd8e66ab0b923997824a56b86c39a5af87f525 ValleyRAT 2026-04-21
URL http://20.6.131.88:443 2026-04-21
FileHash-MD5 ce532f5c12deff2b3ed96360e496d0a6 MD5 of e860ed332d1aa74330c61149893f59f97a288e14049801105b2a6d12b871f7b5 2026-04-21
FileHash-SHA1 ead5a41eba3c04de88431ecfab8662c963e19925 SHA1 of e860ed332d1aa74330c61149893f59f97a288e14049801105b2a6d12b871f7b5 2026-04-21
FileHash-SHA256 e860ed332d1aa74330c61149893f59f97a288e14049801105b2a6d12b871f7b5 2026-04-21
hostname city-wa-lk2.guardiansti1l.in.net 2026-04-21
domain glamouraffair.com 2026-04-21
References (1)
↗ ipblocklist.csv