Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-05-20

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 147

  • keneedy.lolKongTuke payload delivery domain (confidence level: 100%)
  • sagaraya.vipRemus botnet C2 domain (confidence level: 100%)
  • linkedby.orgUnknown malware payload delivery domain (confidence level: 90%)
  • namlongland.netUnknown malware payload delivery domain (confidence level: 90%)
  • finger.linkedby.orgUnknown malware payload delivery domain (confidence level: 90%)
  • tvt.miraibotnet.suMirai payload delivery domain (confidence level: 100%)
  • weyland-yutani-corporate-file.gardenClearFake payload delivery domain (confidence level: 100%)
  • o7se9wfy.stack-matrix.digitalClearFake payload delivery domain (confidence level: 100%)
  • hydraulic-actuator-valve.gardenClearFake payload delivery domain (confidence level: 100%)
  • byzantine-mosaic-restoration.gardenClearFake payload delivery domain (confidence level: 100%)

URLs 50

  • https://keneedy.lol/file.jsKongTuke payload delivery URL (confidence level: 100%)
  • https://keneedy.lol/api/v1/sessionKongTuke payload delivery URL (confidence level: 100%)
  • https://keneedy.lol/api/v1/verifyKongTuke payload delivery URL (confidence level: 100%)
  • https://keneedy.lol/api/v1/statusKongTuke payload delivery URL (confidence level: 100%)
  • http://178.16.55.153/jeffreyepstein.zipUnknown malware payload delivery URL (confidence level: 75%)
  • https://bumblebeejaspercentre.org/Unknown malware payload delivery URL (confidence level: 90%)
  • http://linkedby.org/infos.php?fronts=1Unknown malware payload delivery URL (confidence level: 90%)
  • https://namlongland.net/ebd417db-979c-51f8-aedf-88a2bf8aa6c3/t10Unknown malware payload delivery URL (confidence level: 90%)
  • https://mjwildlife.ca/Unknown malware payload delivery URL (confidence level: 90%)
  • https://pantofr.cyouLumma Stealer botnet C2 (confidence level: 75%)

IP addresses 102

  • 8.148.26.10VShell botnet C2 server (confidence level: 100%)
  • 64.95.12.40VShell botnet C2 server (confidence level: 100%)
  • 45.150.64.192VShell botnet C2 server (confidence level: 100%)
  • 170.106.188.119VShell botnet C2 server (confidence level: 100%)
  • 91.92.243.189Unknown malware payload delivery server (confidence level: 75%)
  • 158.94.209.227Unknown malware payload delivery server (confidence level: 75%)
  • 178.16.55.153Unknown malware payload delivery server (confidence level: 75%)
  • 47.121.117.88Cobalt Strike botnet C2 server (confidence level: 100%)
  • 172.111.233.80AsyncRAT botnet C2 server (confidence level: 100%)
  • 172.111.233.80AsyncRAT botnet C2 server (confidence level: 100%)

Hashes 4

  • 995d9f4dc5725d1301d7e4ac9943ac36dd8da13368381950880818c72f2bba61Unknown malware payload (confidence level: 75%)
  • 9fd30bda0edf3b10b326703303fa15995a688d200582822ef49422ebac87b7f7nccTrojan payload (confidence level: 75%)
  • c8ac1b977d771c89ed7152f0daedb6a3e8b69b24nccTrojan payload (confidence level: 75%)
  • 9408dfa7ca622d0db087985ff6d4288b143e4e4a11c7a734ea4e151b73de8d00Unknown malware payload (confidence level: 90%)

Description

ThreatFox IOCs for 2026-05-20

Community reviews

Loading reviews…