Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-04-13

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 332

  • םvClearFake payload delivery domain (confidence level: 100%)
  • handleill.conferen-cesman.in.netClearFake payload delivery domain (confidence level: 100%)
  • 57vl6.conferen-cesman.in.netClearFake payload delivery domain (confidence level: 100%)
  • quorcore1a.conferen-cesman.in.netClearFake payload delivery domain (confidence level: 100%)
  • breezesto.conferen-cesman.in.netClearFake payload delivery domain (confidence level: 100%)
  • rnoon-wave.rebutrew0rk.in.netClearFake payload delivery domain (confidence level: 100%)
  • modul-scene.rebutrew0rk.in.netClearFake payload delivery domain (confidence level: 100%)
  • serlineet.rebutrew0rk.in.netClearFake payload delivery domain (confidence level: 100%)
  • es3tp.rebutrew0rk.in.netClearFake payload delivery domain (confidence level: 100%)
  • cvsbi.rebutrew0rk.in.netClearFake payload delivery domain (confidence level: 100%)

URLs 50

  • https://www.technopole-pathologie.fr/Unknown malware payload delivery URL (confidence level: 90%)
  • https://t9sg.livekeynextlearn.com/?2e45ae879df914afbb78c98Unknown malware payload delivery URL (confidence level: 90%)
  • https://hmc0.pagebestzoneread.com/?a505ebecd8850a44abUnknown malware payload delivery URL (confidence level: 90%)
  • https://www.taylornicholas.com.au/Unknown malware payload delivery URL (confidence level: 90%)
  • https://tbase.com.mx/Unknown malware payload delivery URL (confidence level: 90%)
  • https://xfwv.livekeynextlearn.com/?eef16b82f9ee0b29dUnknown malware payload delivery URL (confidence level: 90%)
  • https://theblkspectrum.com/Unknown malware payload delivery URL (confidence level: 90%)
  • http://179.43.176.109/loginUnknown malware botnet C2 (confidence level: 100%)
  • https://www.chiropracteur-brignais.fr/Unknown malware payload delivery URL (confidence level: 90%)
  • https://pdfdocumentsharing.com/Unknown malware payload delivery URL (confidence level: 90%)

IP addresses 65

  • 149.12.67.112Xtreme RAT botnet C2 server (confidence level: 100%)
  • 8.210.79.198GobRAT botnet C2 server (confidence level: 100%)
  • 38.207.181.132Unknown malware botnet C2 server (confidence level: 100%)
  • 45.128.119.160Mirai botnet C2 server (confidence level: 80%)
  • 179.43.176.109ShellClient RAT botnet C2 server (confidence level: 50%)
  • 213.111.189.20NjRAT botnet C2 server (confidence level: 100%)
  • 64.81.30.234ValleyRAT botnet C2 server (confidence level: 100%)
  • 192.238.133.6ValleyRAT botnet C2 server (confidence level: 100%)
  • 87.242.106.13RatonRAT botnet C2 server (confidence level: 100%)
  • 64.81.30.234ValleyRAT botnet C2 server (confidence level: 100%)

Hashes 6

Unknown RAT payload (confidence level: 75%)

  • b4a7989bbe6d62951b93a33515f6690dab161e226aaae820ee6d9b086836d433
  • bd3997c44f1820eccc6574ee003bf5319b6a27d28e782937271c6ae190af024d
  • 6f6ee4710884d7b9a6fe498ffe66d0833ccdaddc2a99dff529a42fce2ed32d50
  • 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
  • 7ae34abfc96de00ded88118f432251d114e517ccacc4bfc18e56dd1eb6ded39f
  • ced385f69e56db2f63bafade76c6285b4a2e058880f271d30deadc52459d419d

Description

ThreatFox IOCs for 2026-04-13

Community reviews

Loading reviews…