Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-06

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 170

  • captcha-checkpoint.topKongTuke payload delivery domain (confidence level: 100%)
  • secure.therunningink.comFAKEUPDATES botnet C2 domain (confidence level: 100%)
  • temp.logicfrontier.ccUnknown malware botnet C2 domain (confidence level: 75%)
  • loureiru.lolKongTuke payload delivery domain (confidence level: 100%)
  • openmeadowlab.topSmartApeSG payload delivery domain (confidence level: 100%)
  • linkedmba.comCASTLELOADER payload delivery domain (confidence level: 100%)
  • allenjarmon.comCASTLELOADER payload delivery domain (confidence level: 100%)
  • writersfm.comCASTLELOADER payload delivery domain (confidence level: 100%)
  • crewlworkinew.comCASTLELOADER payload delivery domain (confidence level: 100%)
  • linkedwiz.comCASTLELOADER payload delivery domain (confidence level: 100%)

URLs 24

  • https://diranda.lol/api/v1/statusKongTuke payload delivery URL (confidence level: 100%)
  • https://captcha-checkpoint.top/oKongTuke payload delivery URL (confidence level: 100%)
  • https://copperbeacon.top/health/session-deploy.jsSmartApeSG payload delivery URL (confidence level: 100%)
  • http://196.251.107.104/psd8ezaw/index.phpAmadey botnet C2 (confidence level: 100%)
  • http://196.251.107.104/psd8ezaw/index.phpAmadey botnet C2 (confidence level: 100%)
  • http://177.104.165.104:9443/xmrigXMRIG payload delivery URL (confidence level: 80%)
  • http://45.198.224.5/okMirai payload delivery URL (confidence level: 80%)
  • https://loureiru.lol/file.jsKongTuke payload delivery URL (confidence level: 100%)
  • https://loureiru.lol/api/v1/sessionKongTuke payload delivery URL (confidence level: 100%)
  • https://loureiru.lol/api/v1/verifyKongTuke payload delivery URL (confidence level: 100%)

IP addresses 149

  • 34.173.83.139Mirai payload delivery server (confidence level: 80%)
  • 94.124.119.36Mirai payload delivery server (confidence level: 80%)
  • 177.104.165.104XMRIG payload delivery server (confidence level: 80%)
  • 116.34.14.135XMRIG payload delivery server (confidence level: 80%)
  • 118.182.166.128XOR DDoS payload delivery server (confidence level: 80%)
  • 221.234.36.123XMRIG payload delivery server (confidence level: 80%)
  • 167.71.47.6Mirai payload delivery server (confidence level: 80%)
  • 217.79.226.23RedTail payload delivery server (confidence level: 80%)
  • 47.95.234.23RedTail payload delivery server (confidence level: 80%)
  • 47.238.121.28RedTail payload delivery server (confidence level: 80%)

Hashes 3

Unknown malware payload (confidence level: 75%)

  • a4225ad00fbe2123e27d25bca0988586164e2467762d2d1db304300b2d24d04b
  • ea2bb5ebd6482e87f25949e792c976dfeaddc1bcb36e2c62476854e4aa22d3a7
  • 7340167a765d3d005af93fd10dbd6af48abfd50055fd6b8fca987b7c1363e5d4

Description

ThreatFox IOCs for 2026-06-06

Community reviews

Loading reviews…