Skip to main content
IndicatorPublished Updated

type osint · ThreatFox IOCs for 2026-04-08

Affects type osintSource ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 391

  • peakship.exceptionpong.in.netClearFake payload delivery domain (confidence level: 100%)
  • play67.ccUnknown Stealer botnet C2 domain (confidence level: 100%)
  • microscall.comWAVESHAPER payload delivery domain (confidence level: 100%)
  • microscell.comWAVESHAPER payload delivery domain (confidence level: 100%)
  • microsmeet.xyzWAVESHAPER payload delivery domain (confidence level: 100%)
  • openclaw-cli.gr.comIClickFix payload delivery domain (confidence level: 100%)
  • getmonero.gr.comIClickFix payload delivery domain (confidence level: 100%)
  • electrum-wallet.gr.comIClickFix payload delivery domain (confidence level: 100%)
  • electrum.us.comIClickFix payload delivery domain (confidence level: 100%)
  • featherwallet.us.comIClickFix payload delivery domain (confidence level: 100%)

URLs 89

  • http://150.241.230.16:7777/debugUnknown malware botnet C2 (confidence level: 100%)
  • http://150.241.230.16:7777/system-infoUnknown malware botnet C2 (confidence level: 100%)
  • http://150.241.230.16:7777/dcinjection-sendUnknown malware botnet C2 (confidence level: 100%)
  • https://venergymomentum.com/calculate/Unknown malware payload delivery URL (confidence level: 90%)
  • http://193.233.113.199Unknown Stealer botnet C2 (confidence level: 50%)
  • http://77.91.97.186Unknown Stealer botnet C2 (confidence level: 50%)
  • https://joyfulvoice.org/Unknown malware payload delivery URL (confidence level: 90%)
  • https://vescel.es/Unknown malware payload delivery URL (confidence level: 90%)
  • https://ieedn.org/Unknown malware payload delivery URL (confidence level: 90%)
  • https://smarterfeds.com/Unknown malware payload delivery URL (confidence level: 90%)

IP addresses 97

  • 121.4.21.197Cobalt Strike botnet C2 server (confidence level: 100%)
  • 62.204.35.187Cobalt Strike botnet C2 server (confidence level: 100%)
  • 154.41.194.61Xtreme RAT botnet C2 server (confidence level: 100%)
  • 122.225.30.87Xtreme RAT botnet C2 server (confidence level: 100%)
  • 38.127.138.208Xtreme RAT botnet C2 server (confidence level: 100%)
  • 50.61.162.66Xtreme RAT botnet C2 server (confidence level: 100%)
  • 151.59.114.197SectopRAT botnet C2 server (confidence level: 100%)
  • 85.239.147.3Remcos botnet C2 server (confidence level: 100%)
  • 47.239.118.14GobRAT botnet C2 server (confidence level: 100%)
  • 142.11.206.73WAVESHAPER botnet C2 server (confidence level: 75%)

Description

ThreatFox IOCs for 2026-04-08

Community reviews

Loading reviews…