Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-03

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 138

  • feiyuwei.comLatrodectus payload delivery domain (confidence level: 100%)
  • fre.duitsm188.topVidar botnet C2 domain (confidence level: 100%)
  • fre.canamrental.comVidar botnet C2 domain (confidence level: 100%)
  • hsy1u75o.luxerabet1000.comClearFake payload delivery domain (confidence level: 100%)
  • b7tibc5u.luxerabet1000.comClearFake payload delivery domain (confidence level: 100%)
  • ymihaw7a.eutoor.comClearFake payload delivery domain (confidence level: 100%)
  • vrlh0wdy.eutoor.comClearFake payload delivery domain (confidence level: 100%)
  • rp05pfgt.7lf.netClearFake payload delivery domain (confidence level: 100%)
  • yzqawgz5.7lf.netClearFake payload delivery domain (confidence level: 100%)
  • vdsina.vgCountLoader botnet C2 domain (confidence level: 100%)

URLs 45

  • https://fre.duitsm188.top/Vidar botnet C2 (confidence level: 100%)
  • https://fre.canamrental.com/Vidar botnet C2 (confidence level: 100%)
  • http://149.104.29.201:8111/log.shUnknown malware payload delivery URL (confidence level: 75%)
  • http://149.104.29.201:8455/sltUnknown malware payload delivery URL (confidence level: 75%)
  • http://149.104.29.201:8111/set.shUnknown malware payload delivery URL (confidence level: 75%)
  • http://213.108.20.59/api/files/syncUnknown malware botnet C2 (confidence level: 100%)
  • http://213.108.20.59/api/dataUnknown malware botnet C2 (confidence level: 100%)
  • http://213.108.20.59/api/registerUnknown malware botnet C2 (confidence level: 100%)
  • http://213.108.20.59/api/commands/Unknown malware botnet C2 (confidence level: 100%)
  • http://213.108.20.59/api/resultsUnknown malware botnet C2 (confidence level: 100%)

IP addresses 257

  • 154.88.101.35VShell botnet C2 server (confidence level: 100%)
  • 154.88.101.33VShell botnet C2 server (confidence level: 100%)
  • 154.88.100.62VShell botnet C2 server (confidence level: 100%)
  • 154.88.100.35VShell botnet C2 server (confidence level: 100%)
  • 154.88.100.61VShell botnet C2 server (confidence level: 100%)
  • 8.163.104.36Cobalt Strike botnet C2 server (confidence level: 75%)
  • 45.136.14.91VShell botnet C2 server (confidence level: 75%)
  • 192.227.167.203VShell botnet C2 server (confidence level: 75%)
  • 103.114.163.67VShell botnet C2 server (confidence level: 75%)
  • 154.88.102.47VShell botnet C2 server (confidence level: 75%)

Hashes 5

Unknown malware payload (confidence level: 75%)

  • e3455fb41ba8dce83b27931bacdd6596fd8b925305bedb5bdc00640a0e6a1839
  • 39fbfcccf13ab9d65d90c38b37febef37a89ad7341900ab60eee3896123ed2d1
  • 00443779c72fffed7cc6d40a6e38f32bd5559dc7382177d0866cdaa6a4fe496a
  • 005161b1d1b1065b7e1621306aaa5f48fc2196f0af4b12cf7d313018101ceb7d
  • ff7a32719f16ac930510f2ab8b9131fb3ae3680338d085fc182ff05ebf97de14

Description

ThreatFox IOCs for 2026-06-03

Community reviews

Loading reviews…