Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-04-29

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 261

  • prism6hostunit.quartzprismcloud.gardenClearFake payload delivery domain (confidence level: 100%)
  • flintpathgate.quartzprismcloud.gardenClearFake payload delivery domain (confidence level: 100%)
  • barsows.comKongTuke payload delivery domain (confidence level: 100%)
  • drift2logicnet.tundraflowunit.gardenClearFake payload delivery domain (confidence level: 100%)
  • frosthostbase.tundraflowunit.gardenClearFake payload delivery domain (confidence level: 100%)
  • galesync7zone.tundraflowunit.gardenClearFake payload delivery domain (confidence level: 100%)
  • iron9siteview.basaltlogicnode.gardenClearFake payload delivery domain (confidence level: 100%)
  • screenly.camUnknown malware botnet C2 domain (confidence level: 80%)
  • xtrafftrck.netUnknown malware botnet C2 domain (confidence level: 80%)
  • solidpathlink.basaltlogicnode.gardenClearFake payload delivery domain (confidence level: 100%)

URLs 79

  • https://barsows.com/file.jsKongTuke payload delivery URL (confidence level: 100%)
  • https://barsows.com/tKongTuke payload delivery URL (confidence level: 100%)
  • https://barsows.com/gKongTuke payload delivery URL (confidence level: 100%)
  • https://barsows.com/cKongTuke payload delivery URL (confidence level: 100%)
  • https://screenly.cam/s/f38c71Unknown malware payload delivery URL (confidence level: 75%)
  • https://screenly.cam/s/14867aUnknown malware payload delivery URL (confidence level: 75%)
  • https://screenly.cam/s/f5888fUnknown malware payload delivery URL (confidence level: 75%)
  • https://screenly.cam/s/048688Unknown malware payload delivery URL (confidence level: 75%)
  • https://screenly.cam/s/430d52Unknown malware payload delivery URL (confidence level: 75%)
  • https://screenly.cam/s/c13673Unknown malware payload delivery URL (confidence level: 75%)

IP addresses 46

  • 70.34.205.43Unknown malware botnet C2 server (confidence level: 80%)
  • 172.235.163.133Kimwolf botnet C2 server (confidence level: 100%)
  • 172.235.163.86Kimwolf botnet C2 server (confidence level: 100%)
  • 172.235.163.98Kimwolf botnet C2 server (confidence level: 100%)
  • 172.235.163.113Kimwolf botnet C2 server (confidence level: 100%)
  • 172.235.163.71Kimwolf botnet C2 server (confidence level: 100%)
  • 172.235.163.127Kimwolf botnet C2 server (confidence level: 100%)
  • 172.235.163.114Kimwolf botnet C2 server (confidence level: 100%)
  • 172.235.163.83Kimwolf botnet C2 server (confidence level: 100%)
  • 172.235.163.122Kimwolf botnet C2 server (confidence level: 100%)

Hashes 28

  • 45c8cbaeb5c7708e7b8030e701747c65203958e82eddc41f39e0ca93bd36c114Unknown malware payload (confidence level: 85%)
  • 2b8d4f042daf703b7f152d146bfc892500f436279b0d1866995735998f267af0Unknown malware payload (confidence level: 85%)
  • d2e1ab10d5a0c16a724aeda8acb46b38f551ade58137969c3bc3c9cdc0a12425Unknown malware payload (confidence level: 85%)
  • 75961f1208581c5154324ebe12f01673248374f3aa67317fe79a06fcd2fb9da5Unknown malware payload (confidence level: 80%)
  • b450e893aafd94f2a81e2b70047e6d2faf20cf4056d39cfc17b69ee78912f8b2Unknown malware payload (confidence level: 80%)
  • 10d1c6165f86237950eaff9c19e87eaa3eb5045afedcc7e4db5ba1188e3911feUnknown malware payload (confidence level: 80%)
  • ba041a2dcf88f9ba5e4f9dd0f6e39679f394e6b1d97c6ee765bace9dad247317Unknown malware payload (confidence level: 80%)
  • 0ea172359ddfe89be701d8f80acb4f179ca56af2a214a46a2843367e7b05aa16Unknown malware payload (confidence level: 80%)
  • b7b9d77c527e8c2588bfd5bcc573167bb6e83b68250b009aaa68dcd3ed0a21deUnknown malware payload (confidence level: 80%)
  • 5cb088f8471cad861d18e64c9cf2b692236813e982fb04ab9283f4cf7b5ee11fContagiousDrop payload (confidence level: 100%)

Description

ThreatFox IOCs for 2026-04-29

Community reviews

Loading reviews…