Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-01

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 195

  • 176.65.149.124.ptr.pfcloud.networkMirai botnet C2 domain (confidence level: 80%)
  • castrkq.cyouLumma Stealer botnet C2 domain (confidence level: 75%)
  • frozetk.cyouLumma Stealer botnet C2 domain (confidence level: 75%)
  • genusim.cyouLumma Stealer botnet C2 domain (confidence level: 75%)
  • seasoem.cyouLumma Stealer botnet C2 domain (confidence level: 75%)
  • razefti.cyouLumma Stealer botnet C2 domain (confidence level: 75%)
  • quwmvbk.ismailnas.comClearFake payload delivery domain (confidence level: 100%)
  • zrcvuwg.ismailnas.comClearFake payload delivery domain (confidence level: 100%)
  • iloveblondegirl.topUnknown Stealer botnet C2 domain (confidence level: 100%)
  • nasbt.comClearFake payload delivery domain (confidence level: 100%)

URLs 35

  • https://moll.lanjut.in/Unknown malware payload delivery URL (confidence level: 90%)
  • https://cdn.boyzee.xyz/086ad118cef06dd1ebe63c7b/xmrig_linux_amd64XMRIG payload delivery URL (confidence level: 80%)
  • https://performanceadvisorygroup.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://proaslegal.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://steamcommunity.com/profiles/76561198694626397Vidar botnet C2 (confidence level: 100%)
  • https://telegram.me/kkb31rmVidar botnet C2 (confidence level: 100%)
  • https://mub.dism188.top/Vidar botnet C2 (confidence level: 100%)
  • https://mub.atvrent.com/Vidar botnet C2 (confidence level: 100%)
  • https://46.225.253.9/Vidar botnet C2 (confidence level: 100%)
  • https://46.225.254.27/Vidar botnet C2 (confidence level: 100%)

IP addresses 103

  • 194.87.24.223AsyncRAT botnet C2 server (confidence level: 100%)
  • 112.121.176.93VShell botnet C2 server (confidence level: 100%)
  • 176.65.149.124Mirai botnet C2 server (confidence level: 80%)
  • 124.71.141.30Cobalt Strike botnet C2 server (confidence level: 100%)
  • 124.71.141.30Cobalt Strike botnet C2 server (confidence level: 100%)
  • 154.41.194.82Xtreme RAT botnet C2 server (confidence level: 50%)
  • 149.12.67.243Xtreme RAT botnet C2 server (confidence level: 50%)
  • 94.99.72.225Xtreme RAT botnet C2 server (confidence level: 50%)
  • 46.166.165.73Stealc botnet C2 server (confidence level: 75%)
  • 79.100.83.155DarkComet botnet C2 server (confidence level: 75%)

Hashes 4

  • 86d162d2e4ae90daad260faa7df25be2e28bc70a97d0d0548d80a670177a2739Mirai payload (confidence level: 85%)
  • 5bf67d64e94a8ed6b81a0855fee52626eb0f4caf1772518fc2404883030451c2Mirai payload (confidence level: 85%)
  • 59c29436755b0778e968d49feeae20ed65f5fa5e35f9f7965b8ed93420db91e5RedTail payload (confidence level: 85%)
  • dbb7ebb960dc0d5a480f97ddde3a227a2d83fcaca7d37ae672e6a0a6785631e9RedTail payload (confidence level: 85%)

Description

ThreatFox IOCs for 2026-06-01

Community reviews

Loading reviews…