Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-05-09

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 552

  • files.dsbaux.comFAKEUPDATES botnet C2 domain (confidence level: 100%)
  • fontanf.lolKongTuke payload delivery domain (confidence level: 100%)
  • zai.gr.comUnknown malware payload delivery domain (confidence level: 100%)
  • claudecode.liUnknown malware payload delivery domain (confidence level: 100%)
  • chewy.gr.comUnknown malware payload delivery domain (confidence level: 100%)
  • openrouter.gr.comUnknown malware payload delivery domain (confidence level: 100%)
  • lowes.gr.comUnknown malware payload delivery domain (confidence level: 100%)
  • cursor.liUnknown malware payload delivery domain (confidence level: 100%)
  • deepseek.gr.comUnknown malware payload delivery domain (confidence level: 100%)
  • iaca.gr.comUnknown malware payload delivery domain (confidence level: 100%)

URLs 17

  • https://fontanf.lol/file.jsKongTuke payload delivery URL (confidence level: 100%)
  • https://fontanf.lol/tKongTuke payload delivery URL (confidence level: 100%)
  • https://fontanf.lol/gKongTuke payload delivery URL (confidence level: 100%)
  • https://fontanf.lol/cKongTuke payload delivery URL (confidence level: 100%)
  • https://corppop.shop/Unknown malware payload delivery URL (confidence level: 90%)
  • https://anakondabob.club/Unknown malware payload delivery URL (confidence level: 90%)
  • https://chubrik.sbs/Unknown malware payload delivery URL (confidence level: 90%)
  • https://steamcommunity.com/profiles/76561198707628078Unknown malware payload delivery URL (confidence level: 90%)
  • https://telegram.me/hgo9txUnknown malware payload delivery URL (confidence level: 90%)
  • https://servicehstcmon.com/4b1786e5eb1812f6b3b01ac77deca041/hsts_mont.exeUnknown malware payload delivery URL (confidence level: 85%)

IP addresses 46

  • 137.184.76.141Unknown malware botnet C2 server (confidence level: 75%)
  • 137.184.217.241Unknown malware botnet C2 server (confidence level: 75%)
  • 188.166.75.9Kimwolf botnet C2 server (confidence level: 100%)
  • 206.189.110.191Kimwolf botnet C2 server (confidence level: 100%)
  • 64.227.74.157Kimwolf botnet C2 server (confidence level: 100%)
  • 161.35.93.146Kimwolf botnet C2 server (confidence level: 100%)
  • 152.42.135.190Kimwolf botnet C2 server (confidence level: 100%)
  • 165.22.198.24Kimwolf botnet C2 server (confidence level: 100%)
  • 164.90.206.123Kimwolf botnet C2 server (confidence level: 100%)
  • 161.35.153.147Kimwolf botnet C2 server (confidence level: 100%)

Hashes 16

  • 2872ea2e8dcde72e2d906895d62d646961111519ffacd5832dcd2234f7f087d1Unknown malware payload (confidence level: 90%)
  • 46ebb08f2d47fa214d73507b34a5fec5Unknown malware payload (confidence level: 85%)
  • f417187e20bddd4706df23cd04c5e100bf07bfc8014038e19e2f38a437956691Unknown malware payload (confidence level: 85%)
  • 5a2b957a011901a7e88b8f96028ff004cad590455a36c4816d0f40007323cd01Unknown malware payload (confidence level: 75%)
  • 68e81ce966ca0c016bb638d0d29b106a0da7eab2ddf70438d8182fa89baf5d78Unknown malware payload (confidence level: 75%)
  • d4c620b8fc7aca439861ce67b6f9132b89c2869887ac3f6a1b3008099e43b976Unknown malware payload (confidence level: 75%)
  • f488edb3c0e3e81d7a1d1a4721dc9817a04f65f1939a645172ba8197b8358b41Unknown malware payload (confidence level: 75%)
  • ad7b8b26efc32208989b25ee5eb281333326e7cf6ef92360e4fc21af96f14e52xmrig payload (confidence level: 90%)
  • 79ede42f58b0f72e5953c4fc0cbd250012e045d99704ac0e2e1ebf554a5a2d6eUnknown malware payload (confidence level: 75%)
  • aeac25a227301aedd78e3cd3937b73986750041e3295f178d365ae61c8ac64d9Unknown malware payload (confidence level: 75%)

Description

ThreatFox IOCs for 2026-05-09

Community reviews

Loading reviews…