Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-05-28

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 236

  • ojlfy.akonyvelod.huClearFake payload delivery domain (confidence level: 100%)
  • burwu.akonyvelod.huClearFake payload delivery domain (confidence level: 100%)
  • brayx.akonyvelod.huClearFake payload delivery domain (confidence level: 100%)
  • mtuvm.akonyvelod.huClearFake payload delivery domain (confidence level: 100%)
  • gcalx.bognartransport.huClearFake payload delivery domain (confidence level: 100%)
  • gp2nzna7.taxrundo.huClearFake payload delivery domain (confidence level: 100%)
  • y4hvadqo.taxrundo.huClearFake payload delivery domain (confidence level: 100%)
  • mfvea.bognartransport.huClearFake payload delivery domain (confidence level: 100%)
  • vagvm.brssolar.huClearFake payload delivery domain (confidence level: 100%)
  • oyazs.brssolar.huClearFake payload delivery domain (confidence level: 100%)

URLs 33

  • http://104.243.35.237:8080/Nova Stealer botnet C2 (confidence level: 50%)
  • http://208.115.220.30:8080/Nova Stealer botnet C2 (confidence level: 50%)
  • https://bla.bolaturbo88.top/Vidar botnet C2 (confidence level: 100%)
  • https://bla.matriculadores.com/Vidar botnet C2 (confidence level: 100%)
  • http://boatbeach.online/main_mpslMirai payload delivery URL (confidence level: 100%)
  • http://boatbeach.online/main_m68kMirai payload delivery URL (confidence level: 100%)
  • http://boatbeach.online/main_ppcMirai payload delivery URL (confidence level: 100%)
  • http://boatbeach.online/main_armMirai payload delivery URL (confidence level: 100%)
  • http://boatbeach.online/main_x86_64Mirai payload delivery URL (confidence level: 100%)
  • http://boatbeach.online/shcript.shMirai payload delivery URL (confidence level: 100%)

IP addresses 76

  • 45.225.135.22DCRat botnet C2 server (confidence level: 100%)
  • 103.77.246.174Mirai botnet C2 server (confidence level: 80%)
  • 138.124.61.65AsyncRAT botnet C2 server (confidence level: 100%)
  • 46.246.14.2DCRat botnet C2 server (confidence level: 100%)
  • 209.99.188.248DCRat botnet C2 server (confidence level: 100%)
  • 122.10.24.112VShell botnet C2 server (confidence level: 100%)
  • 199.91.220.199Remcos botnet C2 server (confidence level: 50%)
  • 50.56.159.185Mirai botnet C2 server (confidence level: 80%)
  • 103.217.197.174VShell botnet C2 server (confidence level: 100%)
  • 74.234.184.70Quasar RAT botnet C2 server (confidence level: 100%)

Hashes 5

Unknown malware payload (confidence level: 75%)

  • ef461f4d2f04642ca42c7edaef1a8f8b76d14fcd751e62e6abad6d76c6cc89da
  • 96010d488af15ba94dd0d3be9efc79442345a8b25798bd5dbf123f8aa6ad503f
  • 4e55269c94998a03c2481b2e49923208a657a2e32deecc50e8458eb3b6f55c65
  • 9569cbb08a9bae8b840b0cc69af9af9d8634d4a02b6743a8c49cd35f3367c865
  • 80954dbfaf4aaebe9685f8fca44334f0554b208661a167c498da17154b3a871f

Description

ThreatFox IOCs for 2026-05-28

Community reviews

Loading reviews…