Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-11

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 117

  • ghukonhgf.comUnknown malware botnet C2 domain (confidence level: 75%)
  • 8h9b5pgo.garatequran.xyzClearFake payload delivery domain (confidence level: 100%)
  • sdlclrs.akhlageslami.xyzClearFake payload delivery domain (confidence level: 100%)
  • aolbzrji.red90.casinoClearFake payload delivery domain (confidence level: 100%)
  • mvwrgylee.danestanihavarzeshi.comClearFake payload delivery domain (confidence level: 100%)
  • blueprintmesh.comAMOS payload delivery domain (confidence level: 100%)
  • dstwl.comAMOS payload delivery domain (confidence level: 100%)
  • ewnwfae.hesabdaripishrafte.xyzClearFake payload delivery domain (confidence level: 100%)
  • lwywtkki.winxbet.coClearFake payload delivery domain (confidence level: 100%)
  • verccbf.hesabdarinoravesh.xyzClearFake payload delivery domain (confidence level: 100%)

URLs 26

  • https://ghukonhgf.com/api/Unknown malware botnet C2 (confidence level: 75%)
  • https://github.com/hothehottest/recaptcha-2/releases/download/recaptcha-2/boost.zipUnknown malware payload delivery URL (confidence level: 75%)
  • https://bw-development.app/antibot2Unknown malware payload delivery URL (confidence level: 75%)
  • http://5.83.134.26/sshUnknown malware payload delivery URL (confidence level: 75%)
  • http://151.243.18.28/4940cc4b5ddb4a2bb8f8.phpStealc botnet C2 (confidence level: 100%)
  • https://sup.gasturbo88.top/Vidar botnet C2 (confidence level: 75%)
  • http://154.198.50.76:8080/uploadUnknown malware botnet C2 (confidence level: 100%)
  • https://thisismine.asia/Unknown malware payload delivery URL (confidence level: 90%)
  • https://testerha.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://ffe.gasturbo88.top/Vidar botnet C2 (confidence level: 100%)

IP addresses 214

  • 45.67.84.76Cobalt Strike botnet C2 server (confidence level: 86%)
  • 185.190.212.155Havoc botnet C2 server (confidence level: 100%)
  • 193.233.130.136Cobalt Strike botnet C2 server (confidence level: 99%)
  • 156.234.211.138Cobalt Strike botnet C2 server (confidence level: 50%)
  • 156.234.211.165Cobalt Strike botnet C2 server (confidence level: 50%)
  • 219.92.2.65Cobalt Strike botnet C2 server (confidence level: 50%)
  • 18.175.227.88Cobalt Strike botnet C2 server (confidence level: 50%)
  • 192.144.213.21Cobalt Strike botnet C2 server (confidence level: 50%)
  • 41.234.41.113AsyncRAT botnet C2 server (confidence level: 50%)
  • 64.89.160.198Remcos botnet C2 server (confidence level: 75%)

Hashes 61

  • 8eac8373cb9b6a8004942871ebc691d900a8116c9dede5e3a222392227033245Unknown malware payload (confidence level: 75%)
  • 13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96Unknown malware payload (confidence level: 75%)
  • 07353da1a94a7dc214947fc35f134452b4dba8a6ae81464328d9cf0d1cedc6baUnknown malware payload (confidence level: 75%)
  • bbc8da2cceb3a174e2b0df87bc43c54d3cf3edadb585658bb65517c8f88249b8Unknown malware payload (confidence level: 75%)
  • b56a2ccafe31b6c664c021ec418a660661e5d6d87e1c339beba3b7a4b684d067AMOS payload (confidence level: 100%)
  • 01e33f12a8ee57c89624aeeeb97e57896927483d1442eea22ec6bfddc12f8879AMOS payload (confidence level: 100%)
  • 9a2869a42f54beb07d4d56a16cd56f507a1ae5a9df2e4d816776472cbf4438c6AMOS payload (confidence level: 100%)
  • 7c69d70092676725b6e9269e08f842b22a21eff319240a31b2dfc44147d05d05Unknown malware payload (confidence level: 75%)
  • ce9690621c9311446bcf61ec40498a98f8c1b775185064f6dc321d72fafb468dUnknown malware payload (confidence level: 75%)
  • 8de1ce72b4efd1d4ca0841d79a1fcea463fd8fa84579fe743f58eb6205ccce76Unknown malware payload (confidence level: 75%)

Description

ThreatFox IOCs for 2026-06-11

Community reviews

Loading reviews…