Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-04

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 225

  • uycuyqarnyq16an.topUnknown malware payload delivery domain (confidence level: 75%)
  • jfbrxii.enf90.appUnknown malware payload delivery domain (confidence level: 75%)
  • modernanchorengine.comUnknown malware payload delivery domain (confidence level: 75%)
  • gunanx.303-bet.buzzClearFake payload delivery domain (confidence level: 100%)
  • ssh.spider-net.ccUnknown malware botnet C2 domain (confidence level: 50%)
  • !z!.baccaratbazi.comClearFake payload delivery domain (confidence level: 100%)
  • zkenezc.baccaratbazi.comClearFake payload delivery domain (confidence level: 100%)
  • brixhub.netUnknown malware botnet C2 domain (confidence level: 50%)
  • qxzwbbx.bakht.clubClearFake payload delivery domain (confidence level: 100%)
  • sopa1805.duckdns.orgMirai botnet C2 domain (confidence level: 100%)

URLs 37

  • https://second-confirmation.top/mUnknown malware botnet C2 (confidence level: 75%)
  • http://85.239.149.78:6600/p5m4i979/putty_c4078a0a07f68cb6.msiUnknown malware payload delivery URL (confidence level: 75%)
  • http://85.239.149.78/l6wwkwnj5hc2qdlgliUnknown malware payload delivery URL (confidence level: 75%)
  • https://cosmostars.shop/api/index.php?a=dl&token=8caaf953d89478b8a7191eb32295c117a310b53ac9059d4ad69a1e397ec3b2d4&rv=17ff1b3d94f9144973b09f8064ba72f3&src=www.morecroft.co.nz&mode=cloudflareUnknown malware payload delivery URL (confidence level: 100%)
  • https://jobsforteenshq.com/Vidar payload delivery URL (confidence level: 75%)
  • https://set.dvlv88.top/Vidar botnet C2 (confidence level: 100%)
  • https://set.canamrental.com/Vidar botnet C2 (confidence level: 100%)
  • http://185.228.26.16/azsxd.arm6Unknown malware payload delivery URL (confidence level: 75%)
  • http://185.228.26.16/azsxd.arm7Unknown malware payload delivery URL (confidence level: 75%)
  • http://185.228.26.16/azsxd.arm5Unknown malware payload delivery URL (confidence level: 75%)

IP addresses 202

  • 82.156.219.31Cobalt Strike botnet C2 server (confidence level: 100%)
  • 82.156.219.31Cobalt Strike botnet C2 server (confidence level: 100%)
  • 82.156.219.31Cobalt Strike botnet C2 server (confidence level: 100%)
  • 157.245.52.160Mirai botnet C2 server (confidence level: 100%)
  • 45.197.36.34VShell botnet C2 server (confidence level: 100%)
  • 113.44.136.127Cobalt Strike botnet C2 server (confidence level: 100%)
  • 104.28.154.251XMRIG payload delivery server (confidence level: 80%)
  • 167.86.72.220RedTail payload delivery server (confidence level: 80%)
  • 147.45.50.108Mirai payload delivery server (confidence level: 80%)
  • 130.185.119.80Mirai payload delivery server (confidence level: 80%)

Hashes 53

  • fdbcff609beb437cc8c944c88e101b85a6ec0d592a9afe1c4dc6ef040e7518bdUnknown malware payload (confidence level: 75%)
  • 06e395ff22a7d11297168375628f446b8e11b7cf8ab5ee2a82ab8de1bc6faf5aUnknown malware payload (confidence level: 75%)
  • 40279ce4de656aada27374a03062264cUnknown malware payload (confidence level: 75%)
  • e30a11906aadffc1682a1b07934301c6b68b854c9979bc64fd65152a349ed59fUnknown malware payload (confidence level: 75%)
  • 049409e0f3b42355a44d1e3071da71526bae92dad9e0d70b5f3b91680f08275bUnknown malware payload (confidence level: 75%)
  • 18e4b37eb34c38d7d5a0a1cdec0074f14bfc189b0493c4bc18c287fc09d0e1c3Unknown malware payload (confidence level: 75%)
  • 966266fa8645650be30a6f2f38a40426251f3930a0ccbc4fd307d09cf31de736Unknown malware payload (confidence level: 75%)
  • bf5eea26587860faa25bbff99fb0a02e434d561a28a9675c29494653ade366b0Unknown malware payload (confidence level: 75%)
  • 601f4ae850e192bc76300f3851f4b421ba2e05313cb3f1ace0a0c98301e237bbUnknown malware payload (confidence level: 75%)
  • 4af29f1dc5cacc56d2e84ba3538cb54983b71d4fe27af44c8c00dddcbd45be49Unknown malware payload (confidence level: 75%)

Description

ThreatFox IOCs for 2026-06-04

Community reviews

Loading reviews…