Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-05-12

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 401

  • leafypage.comVidar payload delivery domain (confidence level: 100%)
  • lekeitioikt.eusVidar payload delivery domain (confidence level: 100%)
  • lengochuan.comVidar payload delivery domain (confidence level: 100%)
  • lindabrasil.storeVidar payload delivery domain (confidence level: 100%)
  • linqr.infoVidar payload delivery domain (confidence level: 100%)
  • lionsclubs-ghana.orgVidar payload delivery domain (confidence level: 100%)
  • lisanslandiniz.comVidar payload delivery domain (confidence level: 100%)
  • littleshutterhomes.comVidar payload delivery domain (confidence level: 100%)
  • livewelltoday.siteVidar payload delivery domain (confidence level: 100%)
  • lmrentacar.comVidar payload delivery domain (confidence level: 100%)

URLs 77

  • https://www.proplayuk.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://zofianatra.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://www.yogaonthewallkill.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://www.shivshankarexp.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://www.scalp-coiffure.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://kidspepe.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://jm-reformas.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://htfautoparts.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://jobloom.info/Unknown malware payload delivery URL (confidence level: 90%)
  • https://tramproject.com/private-page-do-not-access/Unknown malware payload delivery URL (confidence level: 90%)

IP addresses 205

  • 172.233.43.225Kimwolf botnet C2 server (confidence level: 100%)
  • 172.233.43.151Kimwolf botnet C2 server (confidence level: 100%)
  • 172.233.43.176Kimwolf botnet C2 server (confidence level: 100%)
  • 172.233.43.136Kimwolf botnet C2 server (confidence level: 100%)
  • 172.233.43.94Kimwolf botnet C2 server (confidence level: 100%)
  • 172.233.43.144Kimwolf botnet C2 server (confidence level: 100%)
  • 172.233.43.254Kimwolf botnet C2 server (confidence level: 100%)
  • 172.233.43.193Kimwolf botnet C2 server (confidence level: 100%)
  • 172.233.43.198Kimwolf botnet C2 server (confidence level: 100%)
  • 172.233.43.234Kimwolf botnet C2 server (confidence level: 100%)

Hashes 4

  • 3941d2e13d9ed19d7f867bd266338e9ec0c8eb986ff656743c83c6d1a03555ccAsyncRAT payload (confidence level: 90%)
  • 971f76da2e6af3dd892550411d2bb53208f21f114f8835c0582f8bd1f4becbccKongTuke payload (confidence level: 100%)
  • 045479ee61a4b0035941606b5efb1d9fdd7dc8c82b8982bd6ea2228a1f2fbf27SmartApeSG payload (confidence level: 75%)
  • 4bc79922cb13d5ea727818222b14f28c69ae6fd161212ed4e136ff7456c4d652SmartApeSG payload (confidence level: 75%)

Description

ThreatFox IOCs for 2026-05-12

Community reviews

Loading reviews…