Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-08

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 411

  • frostapp.frBlankGrabber botnet C2 domain (confidence level: 100%)
  • kuralyok.com.trBlankGrabber botnet C2 domain (confidence level: 100%)
  • blank-rfhww.inBlankGrabber botnet C2 domain (confidence level: 100%)
  • skoch-osjdw.inBlankGrabber botnet C2 domain (confidence level: 100%)
  • skoch-wif67.inBlankGrabber botnet C2 domain (confidence level: 100%)
  • blank-c1vj5.inBlankGrabber botnet C2 domain (confidence level: 100%)
  • g98546cg.beget.techBlankGrabber botnet C2 domain (confidence level: 100%)
  • shaurma.funBlankGrabber botnet C2 domain (confidence level: 100%)
  • skoch-7bced.inBlankGrabber botnet C2 domain (confidence level: 100%)
  • o5.ggBlankGrabber botnet C2 domain (confidence level: 100%)

URLs 79

  • https://121.176.14.102/shRedTail payload delivery URL (confidence level: 85%)
  • https://hoteldugolfe.corsica/Unknown malware payload delivery URL (confidence level: 90%)
  • https://www.lorisdanesi.it/Unknown malware payload delivery URL (confidence level: 90%)
  • https://tracklifefit.com.br/Unknown malware payload delivery URL (confidence level: 90%)
  • https://sharepoint.tu-dresden.be/tqqud08zj6yh94pfUnknown malware payload delivery URL (confidence level: 90%)
  • https://aboutbraces.org/Unknown malware payload delivery URL (confidence level: 90%)
  • https://flownavalarchitect.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://45.91.81.190:8443Unknown malware botnet C2 (confidence level: 75%)
  • https://103.214.174.248:8443Unknown malware botnet C2 (confidence level: 75%)
  • https://108.61.193.37:8443Unknown malware botnet C2 (confidence level: 75%)

IP addresses 101

  • 167.71.5.187Kimwolf botnet C2 server (confidence level: 100%)
  • 134.209.87.103Kimwolf botnet C2 server (confidence level: 100%)
  • 85.209.163.250Unknown Stealer payload delivery server (confidence level: 100%)
  • 47.119.179.4XMRIG payload delivery server (confidence level: 85%)
  • 115.231.76.176XMRIG payload delivery server (confidence level: 85%)
  • 156.67.105.185RedTail payload delivery server (confidence level: 85%)
  • 47.88.104.101RedTail payload delivery server (confidence level: 85%)
  • 45.88.186.59AsyncRAT botnet C2 server (confidence level: 50%)
  • 45.88.186.59AsyncRAT botnet C2 server (confidence level: 50%)
  • 45.88.186.59AsyncRAT botnet C2 server (confidence level: 50%)

Hashes 4

  • 007c16460b4b540cdbdb2488eb9be57baed53a31f2544bda86e3d21fb5e019ffUnknown RAT payload (confidence level: 50%)
  • ac2248d66cadf6597f428cde47f98c1adbb382da0473cceca632dec08ecf3e06Unknown RAT payload (confidence level: 50%)
  • e3300ce9dce0d41690e711b8ee3bb5498ccf25c68d4bafe35416a77a2d88cbd2Cobalt Strike payload (confidence level: 100%)
  • 83a85d92277f0c762414e97f26538e4657f28a1cebe3e4f5d5d32e5ecf7b458aCobalt Strike payload (confidence level: 100%)

Description

ThreatFox IOCs for 2026-06-08

Community reviews

Loading reviews…