Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-07

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 136

  • aptabase.jesfeoqrj3.xyzAndroRAT botnet C2 domain (confidence level: 100%)
  • mhjzma3p.betebetwin.comClearFake payload delivery domain (confidence level: 100%)
  • !k!.nbabet.betClearFake payload delivery domain (confidence level: 100%)
  • nbabet.orgClearFake payload delivery domain (confidence level: 100%)
  • nbabet.promoClearFake payload delivery domain (confidence level: 100%)
  • !k!.ninjafruitcubes.betClearFake payload delivery domain (confidence level: 100%)
  • kvzkqjf.ninjafruitcubes.betClearFake payload delivery domain (confidence level: 100%)
  • geovin.bet404farsi.comClearFake payload delivery domain (confidence level: 100%)
  • minescasino.betClearFake payload delivery domain (confidence level: 100%)
  • ajm1kklw.minescasino.betClearFake payload delivery domain (confidence level: 100%)

URLs 5

  • http://inini.kesug.com/maith.phpKimsuky botnet C2 (confidence level: 100%)
  • http://176.65.139.151/sakura.shMirai payload delivery URL (confidence level: 90%)
  • http://78.40.117.175:8000/xmrigXMRIG payload delivery URL (confidence level: 85%)
  • https://auyflxp.emshab.bet/67f96131-221b-4322-8c31-cbfd82a14546Unknown malware payload delivery URL (confidence level: 75%)
  • http://94.26.83.133/4940cc4b5ddb4a2bb8f8.phpStealc botnet C2 (confidence level: 100%)

IP addresses 104

  • 203.88.125.186Sliver botnet C2 server (confidence level: 50%)
  • 149.12.67.99Xtreme RAT botnet C2 server (confidence level: 75%)
  • 169.239.130.20Mirai botnet C2 server (confidence level: 75%)
  • 95.59.142.69RedTail payload delivery server (confidence level: 90%)
  • 94.26.3.180PureRAT botnet C2 server (confidence level: 100%)
  • 94.26.3.180PureRAT botnet C2 server (confidence level: 100%)
  • 172.86.93.229PureRAT botnet C2 server (confidence level: 100%)
  • 209.99.185.216PureRAT botnet C2 server (confidence level: 100%)
  • 103.97.131.179PureRAT botnet C2 server (confidence level: 100%)
  • 94.26.3.52PureRAT botnet C2 server (confidence level: 100%)

Hashes 6

  • c8828efba8e167e85a1d7f4a86aa743f1bba9c19e467a4e7e50e7970d51b28a9Unknown malware payload (confidence level: 100%)
  • f2d3905ee38b2b5c0b724d582f14eb1db7621ffb8f3826df686a20784341614cUnknown malware payload (confidence level: 100%)
  • 3eebbad99104a48977441a791829a7a442e745ee27b7ab1be7e7418b7ca3e8d9Unknown malware payload (confidence level: 100%)
  • df9e38ea510a595071a3263a83a15753fc1b51c29655eaa9579efc8d1dff6f29Unknown malware payload (confidence level: 100%)
  • c15b5b6667ea2766cc5e7187818414b2Unknown malware payload (confidence level: 75%)
  • 4bc74592e63eddfbf8d60991f1987369fd94983cbe1aea350f31f50bad2e2ccbUnknown malware payload (confidence level: 75%)

Description

ThreatFox IOCs for 2026-06-07

Community reviews

Loading reviews…