Reconnecting to live updates…

ThreatFox IOCs for 2026-06-11

Severity: mediumType: malware

AI Analysis

Technical Summary

The ThreatFox IOCs for 2026-06-11 represent a collection of malware-related indicators shared for threat intelligence purposes. The data does not specify any particular vulnerability, affected software versions, or exploitation techniques. The threat level is assessed as medium with limited analysis and moderate distribution. No active exploits or patches are noted.

Potential Impact

Since no specific vulnerabilities or exploits are identified, the impact is limited to the presence of malware-related indicators that may assist in detection and response. There is no direct evidence of active exploitation or compromise detailed in the provided information.

Mitigation Recommendations

No patch or official remediation is available or applicable for this IOC collection. Security teams should use the provided indicators to enhance detection capabilities but no urgent remediation actions are indicated.

Indicators of Compromise

file: 45.67.84.76
hash: 3389
url: https://ghukonhgf.com/api/
domain: ghukonhgf.com
hash: 8eac8373cb9b6a8004942871ebc691d900a8116c9dede5e3a222392227033245
hash: 13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96
hash: 07353da1a94a7dc214947fc35f134452b4dba8a6ae81464328d9cf0d1cedc6ba
hash: bbc8da2cceb3a174e2b0df87bc43c54d3cf3edadb585658bb65517c8f88249b8
url: https://github.com/hothehottest/recaptcha-2/releases/download/recaptcha-2/boost.zip
url: https://bw-development.app/antibot2
file: 185.190.212.155
hash: 443
url: http://5.83.134.26/ssh
domain: 8h9b5pgo.garatequran.xyz
domain: sdlclrs.akhlageslami.xyz
file: 193.233.130.136
hash: 3389
domain: aolbzrji.red90.casino
file: 156.234.211.138
hash: 8821
file: 156.234.211.165
hash: 8821
file: 219.92.2.65
hash: 443
file: 18.175.227.88
hash: 80
file: 192.144.213.21
hash: 18443
file: 41.234.41.113
hash: 8808
file: 64.89.160.198
hash: 8080
domain: mvwrgylee.danestanihavarzeshi.com
file: 193.106.8.24
hash: 443
file: 185.89.214.29
hash: 443
file: 47.92.206.63
hash: 443
file: 47.92.206.63
hash: 80
file: 47.92.206.63
hash: 8080
domain: blueprintmesh.com
domain: dstwl.com
hash: b56a2ccafe31b6c664c021ec418a660661e5d6d87e1c339beba3b7a4b684d067
hash: 01e33f12a8ee57c89624aeeeb97e57896927483d1442eea22ec6bfddc12f8879
hash: 9a2869a42f54beb07d4d56a16cd56f507a1ae5a9df2e4d816776472cbf4438c6
domain: ewnwfae.hesabdaripishrafte.xyz
domain: lwywtkki.winxbet.co
hash: 7c69d70092676725b6e9269e08f842b22a21eff319240a31b2dfc44147d05d05
url: http://151.243.18.28/4940cc4b5ddb4a2bb8f8.php
file: 34.92.128.98
hash: 443
file: 34.92.128.98
hash: 8080
domain: verccbf.hesabdarinoravesh.xyz
domain: kpeahfhd.rial.bet
file: 18.162.74.188
hash: 112
domain: m2bu2yf9.ansuyemarg.xyz
file: 43.160.193.90
hash: 6666
domain: zo4t1q36.moarefeslami.xyz
domain: iznukhb.hesabdari2.xyz
domain: mocauhxe.mabanishimi.xyz
domain: 1cihg2b5.anodaz.vip
domain: rjwfiwgjr.defamogadas.xyz
url: https://sup.gasturbo88.top/
domain: sup.gasturbo88.top
domain: dmwncnnnp.defamogadas.xyz
domain: ifvtbgbf.maharatmodiran.xyz
file: 1.94.184.17
hash: 60002
file: 104.233.154.139
hash: 888
file: 45.38.20.122
hash: 443
file: 45.38.20.122
hash: 80
file: 45.38.20.122
hash: 8080
domain: qlvwxer.karafarini.shop
file: 139.5.108.17
hash: 443
file: 49.233.105.49
hash: 4444
file: 160.202.230.103
hash: 80
file: 211.159.225.77
hash: 80
file: 124.220.41.22
hash: 443
file: 43.136.180.88
hash: 443
file: 47.121.181.148
hash: 443
file: 43.136.180.88
hash: 8080
file: 117.72.220.212
hash: 8080
file: 120.55.3.157
hash: 10000
file: 45.87.53.6
hash: 8443
file: 209.99.191.186
hash: 8765
domain: kuonnjkj.masirpayambari.xyz
file: 8.219.158.30
hash: 8080
file: 103.202.61.220
hash: 443
file: 186.246.16.124
hash: 443
domain: slojemw.leaguejazire.com
file: 175.98.132.116
hash: 9443
file: 45.67.222.21
hash: 3389
url: http://154.198.50.76:8080/upload
domain: 1v6le0j1.andisheeslami2.xyz
file: 2.26.228.27
hash: 443
file: 47.121.181.148
hash: 80
file: 47.121.181.148
hash: 8080
domain: hzvvlqps.mechanicsayalat.xyz
domain: juakvinjpo34.xyz
file: 209.99.184.216
hash: 56001
file: 209.99.184.216
hash: 56002
file: 209.99.184.216
hash: 56003
domain: 4piqgfum.garatequran.xyz
domain: aetherframework.digital
domain: ldmmsp6b.angizeshfarahani.store
domain: xnvdto36.ganuneasasi.xyz
domain: cxwqtlc8.asibshenasiyahya.shop
domain: rn0mptxh.anodaz.tv
domain: 181xlt4g.gavaedfagahe.xyz
domain: jqfg2zyi.ehtemalatvaamar.xyz
domain: 8t4ow8gc.azmoonhayeravani.shop
domain: 988920lt-ublib.988920a1.buzz
domain: gng97m36.angizeshfarahani.store
domain: omeade.2k3phuchau.christmas
domain: allfood.2k3phuchau.christmas
domain: njjinvestments.2k3phuchau.christmas
domain: cqshazxp.neural-atlas.digital
domain: s8a20vxh.gavaedfagahe.xyz
domain: yvlenqci.rial.bet
domain: kwoptitn.restaurantguideaarhus.com
file: 160.202.230.103
hash: 443
file: 160.202.230.103
hash: 8080
file: 64.89.162.82
hash: 6606
domain: thisismine.asia
domain: qnjutqs.bet303.app
domain: gwofphogw.differentialmamuli.store
file: 182.23.2.163
hash: 1230
file: 182.23.2.163
hash: 4048
file: 182.23.2.163
hash: 4814
file: 206.81.21.156
hash: 4321
domain: p5k42qtw.anodaz.co
file: 43.136.180.88
hash: 80
domain: clabrmercur.pages.dev
domain: clabrmercur.pages.dev
domain: clavgood.pages.dev
domain: clavgood.pages.dev
domain: storgvkam.pages.dev
domain: storgvkam.pages.dev
domain: storgvkam.pages.dev
domain: claude-code-product.squarespace.com
domain: claude-code-product.squarespace.com
domain: notebooklm-update-version.squarespace.com
domain: notebooklm-update-version.squarespace.com
domain: notebooklm-update-version.squarespace.com
domain: notebooklm-update-version.squarespace.com
domain: gimomouf.red90.casino
domain: shell.botnet.st
domain: real.botnet.st
domain: 2chci0sm.andisheeslami2.xyz
domain: zyuhgbux.hugugtejarat4.xyz
url: https://thisismine.asia/
url: https://testerha.com/
domain: ieemaju.akhlageslami.xyz
domain: btbwehpkp.drivingbook.xyz
file: 211.159.225.77
hash: 443
file: 211.159.225.77
hash: 8080
domain: ffe.gasturbo88.top
url: https://ffe.gasturbo88.top/
domain: ffe.glamisdunesrentals.com
url: https://ffe.glamisdunesrentals.com/
url: https://verif-code.lol/o
domain: verif-code.lol
domain: ghdre2hy.geotechnictahuni.store
domain: 02y48l3v.asibshenasiyahya.shop
file: 156.234.211.162
hash: 8821
file: 117.72.159.215
hash: 8080
file: 114.132.89.132
hash: 8443
file: 154.201.68.191
hash: 50050
file: 114.134.187.38
hash: 50050
file: 20.15.58.107
hash: 50050
file: 218.244.142.4
hash: 50050
file: 114.132.199.129
hash: 1443
file: 135.125.196.5
hash: 50050
file: 190.90.147.38
hash: 50050
file: 120.26.208.96
hash: 50050
file: 134.65.51.39
hash: 443
file: 159.89.167.49
hash: 3333
file: 20.197.43.238
hash: 3333
file: 57.162.106.141
hash: 3333
file: 103.85.226.42
hash: 8443
file: 173.249.33.186
hash: 3333
file: 34.172.171.254
hash: 443
file: 101.96.111.198
hash: 3333
file: 51.159.82.179
hash: 3333
file: 190.20.96.35
hash: 3333
file: 195.246.230.115
hash: 3333
file: 203.189.71.122
hash: 3333
file: 200.33.163.61
hash: 3333
file: 20.197.43.238
hash: 443
file: 152.89.16.45
hash: 3333
file: 46.182.217.204
hash: 443
file: 34.128.109.190
hash: 3333
file: 54.86.242.233
hash: 443
file: 202.10.42.113
hash: 8443
file: 62.84.172.151
hash: 31337
file: 66.116.238.103
hash: 31337
file: 5.230.201.54
hash: 31337
file: 95.111.239.243
hash: 31337
file: 185.163.2.10
hash: 31337
file: 103.160.59.17
hash: 31337
file: 213.21.254.240
hash: 31337
file: 185.225.226.85
hash: 31337
file: 107.189.11.149
hash: 31337
file: 80.241.219.92
hash: 31337
file: 74.48.108.73
hash: 31337
file: 91.236.230.152
hash: 31337
file: 172.105.114.236
hash: 31337
file: 159.65.22.41
hash: 31337
file: 194.87.24.131
hash: 31337
file: 193.242.184.158
hash: 31337
file: 185.241.208.118
hash: 31337
file: 95.182.84.43
hash: 31337
file: 109.107.140.248
hash: 31337
file: 101.200.39.128
hash: 31337
file: 80.241.208.176
hash: 31337
file: 194.146.38.191
hash: 31337
file: 195.246.230.115
hash: 31337
file: 207.174.30.91
hash: 31337
file: 169.40.135.88
hash: 31337
file: 173.230.0.145
hash: 31337
file: 149.28.13.194
hash: 443
file: 38.76.169.231
hash: 443
file: 43.112.115.8
hash: 443
domain: namrqlix.hugugnasiri.xyz
file: 129.226.121.12
hash: 443
file: 165.29.86.2
hash: 8989
file: 94.49.35.175
hash: 9090
file: 35.168.186.153
hash: 443
file: 13.58.240.163
hash: 443
file: 130.160.1.225
hash: 443
file: 35.130.170.60
hash: 443
file: 3.18.5.177
hash: 443
file: 209.91.248.6
hash: 8443
file: 153.75.227.142
hash: 1337
file: 159.65.154.209
hash: 1337
file: 83.142.209.60
hash: 1337
file: 172.238.122.85
hash: 1337
file: 62.210.214.18
hash: 1337
file: 144.172.104.22
hash: 1337
file: 87.106.75.120
hash: 1337
file: 79.110.49.85
hash: 8089
file: 65.108.32.130
hash: 8089
file: 34.89.98.172
hash: 8089
file: 20.54.88.98
hash: 8089
file: 34.143.184.190
hash: 8089
file: 35.239.220.64
hash: 8089
file: 113.44.64.117
hash: 7443
file: 175.178.123.42
hash: 8089
file: 159.89.48.54
hash: 7443
file: 107.148.1.64
hash: 9443
file: 122.114.252.115
hash: 12340
file: 151.59.114.129
hash: 8080
file: 146.103.126.127
hash: 9000
file: 185.241.208.118
hash: 4321
file: 185.241.208.118
hash: 4444
file: 104.168.62.5
hash: 54984
file: 185.167.96.179
hash: 1604
file: 138.124.29.208
hash: 80
file: 64.89.162.149
hash: 80
url: https://alabastermarket.top/role/health-json
domain: alabastermarket.top
url: https://alabastermarket.top/role/redirect-html.js
file: 172.94.18.103
hash: 79
file: 122.51.50.44
hash: 4444
file: 122.51.50.44
hash: 443
file: 122.51.50.44
hash: 80
domain: mymrtijp.hugugmadani6.xyz
domain: dl.erickillorinphotostore.com
url: https://saffronarchivehub.top/role/policy-sessionstore.js
domain: saffronarchivehub.top
url: https://saffronarchivehub.top/role/health-json
url: https://saffronarchivehub.top/role/redirect-html.js
domain: www.sharingfile.cloud
domain: linkednewsapi.top
file: 193.169.240.38
hash: 443
file: 104.193.255.99
hash: 8443
url: http://spasopro.at/index.php
url: https://spasopro.at/index.php
file: 104.234.18.91
hash: 80
file: 45.88.91.5
hash: 7004
file: 94.154.32.163
hash: 7004
file: 104.234.18.91
hash: 3001
url: http://104.234.18.91:3001/ws
url: http://104.234.18.91:3001/api/internal/log
url: http://104.234.18.91:3001/api/upload
file: 122.51.50.44
hash: 8080
file: 62.60.226.185
hash: 6003
file: 154.23.189.41
hash: 14782
file: 8.152.2.86
hash: 443
domain: ogonna.ydns.eu
domain: hqvgwxfu.hugugedari.xyz
domain: cmkfhtt.bet303.promo
domain: jksidxrvz.bookdrive.xyz
domain: mlcos.cdnupdate.net
hash: ce9690621c9311446bcf61ec40498a98f8c1b775185064f6dc321d72fafb468d
hash: 8de1ce72b4efd1d4ca0841d79a1fcea463fd8fa84579fe743f58eb6205ccce76
domain: starayadaet.com
domain: marblecologrgr.com
file: 8.152.2.86
hash: 80
file: 8.152.2.86
hash: 8080
file: 16.170.32.198
hash: 7443
file: 36.255.197.120
hash: 443
file: 139.59.106.160
hash: 80
domain: ox3.glamisdunesrentals.com
url: https://ox3.glamisdunesrentals.com/
url: https://ox3.gasturbo88.top/
domain: ox3.gasturbo88.top
domain: nibfzvsq.hugugbime.xyz
domain: rlpxurgo.qurandownload.xyz
domain: znrax5pn.qurandownload.xyz
domain: 98jhjysx.ehtemalatvaamar.xyz
file: 139.59.106.160
hash: 443
file: 80.76.49.194
hash: 56003
file: 80.76.49.194
hash: 56002
file: 80.76.49.194
hash: 56001
hash: 7e49b00bef718eb7e3645d8705e6521b011f66d10f06201e209a8a0511abc81a
hash: b50a05e38e9d04fd5c4dac4f29850649a77bb3ae443639206c908058e45593eb
hash: a05254840b45fcbfd12d09fd416ca860e2cfcab793f4780fa8f138b8f7a86aab
file: 216.250.251.226
hash: 8443
domain: ffynigbdr.barnamenevisi.xyz
domain: hlgwrpbh.mechanicsayalat.xyz
domain: nkxkhfp.bet303.app
file: 193.106.217.106
hash: 80
file: 185.89.255.244
hash: 80
domain: f7a20n5o.ravansalamat.shop
domain: ljj8nzo0.ravansalamat.shop
domain: 933anmoo.azmoonhayeravani.shop
domain: kaiojocv.masirpayambari.xyz
file: 109.199.109.62
hash: 31337
file: 109.199.109.62
hash: 40056
file: 130.94.18.95
hash: 24321
file: 155.103.71.115
hash: 14408
file: 178.255.126.146
hash: 7707
file: 182.23.2.163
hash: 8307
file: 188.137.242.166
hash: 6606
file: 188.137.242.166
hash: 7707
file: 188.137.242.166
hash: 8808
file: 192.3.139.18
hash: 15221
file: 194.116.236.239
hash: 4069
file: 2.27.62.228
hash: 60204
file: 209.99.188.193
hash: 43221
file: 213.165.40.206
hash: 8887
file: 23.235.185.45
hash: 12159
file: 23.235.185.46
hash: 12159
file: 31.76.93.193
hash: 4321
file: 45.225.135.43
hash: 6606
file: 45.225.135.43
hash: 7707
file: 45.225.135.43
hash: 8808
file: 46.101.195.123
hash: 31400
file: 46.151.182.181
hash: 2404
file: 46.246.80.2
hash: 8848
file: 64.89.162.59
hash: 4422
domain: 1364170351-9enmkvd46p.ap-guangzhou.tencentscf.com
file: 178.16.53.137
hash: 443
file: 117.72.159.215
hash: 80
file: 120.55.3.157
hash: 443
domain: t92hw5pi.nazariyeyadgiri.xyz
domain: eeqagxew.maharatmodiran.xyz
domain: owedcphc.ravanshenakhti.shop
file: 120.55.3.157
hash: 80
file: 120.55.3.157
hash: 8080
file: 49.233.136.227
hash: 80
file: 49.233.136.227
hash: 443
file: 49.233.136.227
hash: 8080
domain: srv.gasturbo88.top
url: https://srv.gasturbo88.top/
domain: srv.glamisdunesrentals.com
url: https://srv.glamisdunesrentals.com/
domain: o0irv3h9.ravabetensani.site
domain: bfksnnrp.prozhecart.com
domain: jdxqaihsh.bankefiile.com
file: 43.99.110.114
hash: 80
file: 43.99.110.114
hash: 8080
file: 154.23.189.184
hash: 14782
domain: zjtjokj.quranmohagegin.shop
domain: qlwxqybo.prozhedownload.com
domain: 2sci40h1.ravanshenasiganji.xyz
domain: pipx8iw2.ravanshenasiganji.xyz
domain: msp.shoptopexpress.com
file: 154.23.189.196
hash: 14782
file: 54.196.27.211
hash: 8084
hash: f0ff7f1e0e1544828984d40247d38e38cb4b5d528665098c058e41b24db1d56f
hash: 059182cc6f9d9a6ae2aced1075e5ab3f4e081d55
hash: 1f8b721815bfd4f57aa377369fa5f2ed
hash: 20a1484577dc0b66613cc70619a74dfcaa7da6c19d0a4949cbc83a8e80317fd9
hash: 213cd9fcf2377c5b72e02e4490863dc535bbe871
hash: b82f0b9989f316d6679e1ea067e31cdd
hash: c0b18beb746f408a76371760e64ab37b350419da5292a6fe5b9b83bf7e225257
hash: 87bc65dccd4cb91d55afc1afd257c23acd14570c
hash: a59b7602663fb130c5a85507fbbe29a2
hash: c8889ebbf9516b00d148dfd3b2aee781deb30d27f654039903d31a8ff39d1f4e
hash: b1e46ed3f539868edb60e25b523e77dea71868c2
hash: 2e4973a854f88682666c77394ec3e61e
hash: 68a34fd6765d3a6d791e83c29e783fbe585579e08ea1ad569962e6644a3197a3
hash: 8314be1136b9d1fc76350f1c7ef4cf8fe52a4acb
hash: e06aacd6139288d5bea4a676ee0c2404
hash: 73b2c01ca7f082bf4d999426e07886144b7bccaecead90e1acf661695fda39b1
hash: 13d8b44123e6f9f9a58a9359d0a772566f4eff3b
hash: 93996829b15b3cf1bb4bd79f2091d72f
hash: 3d008cb4d346a95396868f786ec6d4fe7e12a0451768f957664abba7469f2cf0
hash: e7026b2f6adadbf070e9926e1d4b79a65044cd5c
hash: 92bc3b1ba378c14e601c4e617ec7c422
hash: 8a82da328a3db0fca63f31e7b464b5989cecfd619ebab0b238c07b63544bf823
hash: be34707cb56d7b41393d14c67b4ad8626c4519d7
hash: 39a19118f2d38bfdb9421f69a84e5dec
hash: 574c4503c071e8e8892d267e786acdf811970d4f927cf4536a870c8ba2fc7a13
hash: fb5a09899b06e4ed91b14a9e67f5ece2a558a877
hash: 0ff94617c08fe032327753b286011da5
hash: d049d136b7c8aaf342ffd924e09d23b2ca168552b3a6b3cf68913657b68fdf37
hash: 0ca01817ecdf07b17f89b5e8a070e541c5dd922b
hash: c843d4538bb0f0c1b31e057ec7d8d8c1
hash: 162a1c2e10796e24e94283907b9af34f7cbb9a38002e374afa715f7d101248fc
hash: 164493c98f5172618a090b336b9ddf41d90f5751
hash: 537013864063eb458e47b3fcbbffbc8f
hash: 7458d3a59fa6682ac4d2e3070ccbd0c223607eed768bd7a99d14f6dc5bfb88b9
hash: 07c5bd17e0d1930f324aaa02369fd7e85a6585d6
hash: 700fab1c874a6e5948af14c7d122bd48
hash: 985a2c4839ac4ded904d1d9b354d2fbe9e24c36e963d171d7e21130a4c0f66d4
hash: e562387236169b80911a4081e772ac1151942462
hash: 173e47952a519cedcbc37d7468c0afe5
hash: b3e6200b05e579b9577686e9f510338b197fe392483f3d2eb50398d3097573cb
hash: 2a6ff4571b915d61b60ecc2922d342f07bdfb71d
hash: d13cad682fd5abb767313f79c1732822
hash: c2a383a0dff5e69299443a119bb73f2b76f3f9c0f3951330ffea5db26fc3797f
hash: 60b2674a3acda83abedd7173355a9473f2904f17
hash: 624eb52464199c7dfea8f082c5b4e9f7
hash: 9a04ce5c1ed6e353d8d8d936fefba4517ecc8f6777e5f866178dba084ae90d8a
hash: cf5058b0d233abf4abf55bd13597f9b07c5d2eed
hash: 18b93f31c49e4302e3fd26764b6ad37a
domain: ravandarmani.xyz
domain: fdktfbbn.jam-jahani.com
domain: qeyshvibv.azmoonzare.online

ThreatFox IOCs for 2026-06-11

Severity: medium

Type: malware

ThreatFox IOCs for 2026-06-11

Technical Summary

Potential Impact

Mitigation Recommendations

Indicators of Compromise

file: 45.67.84.76
hash: 3389
url: https://ghukonhgf.com/api/
domain: ghukonhgf.com
hash: 8eac8373cb9b6a8004942871ebc691d900a8116c9dede5e3a222392227033245
hash: 13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96
hash: 07353da1a94a7dc214947fc35f134452b4dba8a6ae81464328d9cf0d1cedc6ba
hash: bbc8da2cceb3a174e2b0df87bc43c54d3cf3edadb585658bb65517c8f88249b8
url: https://github.com/hothehottest/recaptcha-2/releases/download/recaptcha-2/boost.zip
url: https://bw-development.app/antibot2
file: 185.190.212.155
hash: 443
url: http://5.83.134.26/ssh
domain: 8h9b5pgo.garatequran.xyz
domain: sdlclrs.akhlageslami.xyz
file: 193.233.130.136
hash: 3389
domain: aolbzrji.red90.casino
file: 156.234.211.138
hash: 8821
file: 156.234.211.165
hash: 8821
file: 219.92.2.65
hash: 443
file: 18.175.227.88
hash: 80
file: 192.144.213.21
hash: 18443
file: 41.234.41.113
hash: 8808
file: 64.89.160.198
hash: 8080
domain: mvwrgylee.danestanihavarzeshi.com
file: 193.106.8.24
hash: 443
file: 185.89.214.29
hash: 443
file: 47.92.206.63
hash: 443
file: 47.92.206.63
hash: 80
file: 47.92.206.63
hash: 8080
domain: blueprintmesh.com
domain: dstwl.com
hash: b56a2ccafe31b6c664c021ec418a660661e5d6d87e1c339beba3b7a4b684d067
hash: 01e33f12a8ee57c89624aeeeb97e57896927483d1442eea22ec6bfddc12f8879
hash: 9a2869a42f54beb07d4d56a16cd56f507a1ae5a9df2e4d816776472cbf4438c6
domain: ewnwfae.hesabdaripishrafte.xyz
domain: lwywtkki.winxbet.co
hash: 7c69d70092676725b6e9269e08f842b22a21eff319240a31b2dfc44147d05d05
url: http://151.243.18.28/4940cc4b5ddb4a2bb8f8.php
file: 34.92.128.98
hash: 443
file: 34.92.128.98
hash: 8080
domain: verccbf.hesabdarinoravesh.xyz
domain: kpeahfhd.rial.bet
file: 18.162.74.188
hash: 112
domain: m2bu2yf9.ansuyemarg.xyz
file: 43.160.193.90
hash: 6666
domain: zo4t1q36.moarefeslami.xyz
domain: iznukhb.hesabdari2.xyz
domain: mocauhxe.mabanishimi.xyz
domain: 1cihg2b5.anodaz.vip
domain: rjwfiwgjr.defamogadas.xyz
url: https://sup.gasturbo88.top/
domain: sup.gasturbo88.top
domain: dmwncnnnp.defamogadas.xyz
domain: ifvtbgbf.maharatmodiran.xyz
file: 1.94.184.17
hash: 60002
file: 104.233.154.139
hash: 888
file: 45.38.20.122
hash: 443
file: 45.38.20.122
hash: 80
file: 45.38.20.122
hash: 8080
domain: qlvwxer.karafarini.shop
file: 139.5.108.17
hash: 443
file: 49.233.105.49
hash: 4444
file: 160.202.230.103
hash: 80
file: 211.159.225.77
hash: 80
file: 124.220.41.22
hash: 443
file: 43.136.180.88
hash: 443
file: 47.121.181.148
hash: 443
file: 43.136.180.88
hash: 8080
file: 117.72.220.212
hash: 8080
file: 120.55.3.157
hash: 10000
file: 45.87.53.6
hash: 8443
file: 209.99.191.186
hash: 8765
domain: kuonnjkj.masirpayambari.xyz
file: 8.219.158.30
hash: 8080
file: 103.202.61.220
hash: 443
file: 186.246.16.124
hash: 443
domain: slojemw.leaguejazire.com
file: 175.98.132.116
hash: 9443
file: 45.67.222.21
hash: 3389
url: http://154.198.50.76:8080/upload
domain: 1v6le0j1.andisheeslami2.xyz
file: 2.26.228.27
hash: 443
file: 47.121.181.148
hash: 80
file: 47.121.181.148
hash: 8080
domain: hzvvlqps.mechanicsayalat.xyz
domain: juakvinjpo34.xyz
file: 209.99.184.216
hash: 56001
file: 209.99.184.216
hash: 56002
file: 209.99.184.216
hash: 56003
domain: 4piqgfum.garatequran.xyz
domain: aetherframework.digital
domain: ldmmsp6b.angizeshfarahani.store
domain: xnvdto36.ganuneasasi.xyz
domain: cxwqtlc8.asibshenasiyahya.shop
domain: rn0mptxh.anodaz.tv
domain: 181xlt4g.gavaedfagahe.xyz
domain: jqfg2zyi.ehtemalatvaamar.xyz
domain: 8t4ow8gc.azmoonhayeravani.shop
domain: 988920lt-ublib.988920a1.buzz
domain: gng97m36.angizeshfarahani.store
domain: omeade.2k3phuchau.christmas
domain: allfood.2k3phuchau.christmas
domain: njjinvestments.2k3phuchau.christmas
domain: cqshazxp.neural-atlas.digital
domain: s8a20vxh.gavaedfagahe.xyz
domain: yvlenqci.rial.bet
domain: kwoptitn.restaurantguideaarhus.com
file: 160.202.230.103
hash: 443
file: 160.202.230.103
hash: 8080
file: 64.89.162.82
hash: 6606
domain: thisismine.asia
domain: qnjutqs.bet303.app
domain: gwofphogw.differentialmamuli.store
file: 182.23.2.163
hash: 1230
file: 182.23.2.163
hash: 4048
file: 182.23.2.163
hash: 4814
file: 206.81.21.156
hash: 4321
domain: p5k42qtw.anodaz.co
file: 43.136.180.88
hash: 80
domain: clabrmercur.pages.dev
domain: clabrmercur.pages.dev
domain: clavgood.pages.dev
domain: clavgood.pages.dev
domain: storgvkam.pages.dev
domain: storgvkam.pages.dev
domain: storgvkam.pages.dev
domain: claude-code-product.squarespace.com
domain: claude-code-product.squarespace.com
domain: notebooklm-update-version.squarespace.com
domain: notebooklm-update-version.squarespace.com
domain: notebooklm-update-version.squarespace.com
domain: notebooklm-update-version.squarespace.com
domain: gimomouf.red90.casino
domain: shell.botnet.st
domain: real.botnet.st
domain: 2chci0sm.andisheeslami2.xyz
domain: zyuhgbux.hugugtejarat4.xyz
url: https://thisismine.asia/
url: https://testerha.com/
domain: ieemaju.akhlageslami.xyz
domain: btbwehpkp.drivingbook.xyz
file: 211.159.225.77
hash: 443
file: 211.159.225.77
hash: 8080
domain: ffe.gasturbo88.top
url: https://ffe.gasturbo88.top/
domain: ffe.glamisdunesrentals.com
url: https://ffe.glamisdunesrentals.com/
url: https://verif-code.lol/o
domain: verif-code.lol
domain: ghdre2hy.geotechnictahuni.store
domain: 02y48l3v.asibshenasiyahya.shop
file: 156.234.211.162
hash: 8821
file: 117.72.159.215
hash: 8080
file: 114.132.89.132
hash: 8443
file: 154.201.68.191
hash: 50050
file: 114.134.187.38
hash: 50050
file: 20.15.58.107
hash: 50050
file: 218.244.142.4
hash: 50050
file: 114.132.199.129
hash: 1443
file: 135.125.196.5
hash: 50050
file: 190.90.147.38
hash: 50050
file: 120.26.208.96
hash: 50050
file: 134.65.51.39
hash: 443
file: 159.89.167.49
hash: 3333
file: 20.197.43.238
hash: 3333
file: 57.162.106.141
hash: 3333
file: 103.85.226.42
hash: 8443
file: 173.249.33.186
hash: 3333
file: 34.172.171.254
hash: 443
file: 101.96.111.198
hash: 3333
file: 51.159.82.179
hash: 3333
file: 190.20.96.35
hash: 3333
file: 195.246.230.115
hash: 3333
file: 203.189.71.122
hash: 3333
file: 200.33.163.61
hash: 3333
file: 20.197.43.238
hash: 443
file: 152.89.16.45
hash: 3333
file: 46.182.217.204
hash: 443
file: 34.128.109.190
hash: 3333
file: 54.86.242.233
hash: 443
file: 202.10.42.113
hash: 8443
file: 62.84.172.151
hash: 31337
file: 66.116.238.103
hash: 31337
file: 5.230.201.54
hash: 31337
file: 95.111.239.243
hash: 31337
file: 185.163.2.10
hash: 31337
file: 103.160.59.17
hash: 31337
file: 213.21.254.240
hash: 31337
file: 185.225.226.85
hash: 31337
file: 107.189.11.149
hash: 31337
file: 80.241.219.92
hash: 31337
file: 74.48.108.73
hash: 31337
file: 91.236.230.152
hash: 31337
file: 172.105.114.236
hash: 31337
file: 159.65.22.41
hash: 31337
file: 194.87.24.131
hash: 31337
file: 193.242.184.158
hash: 31337
file: 185.241.208.118
hash: 31337
file: 95.182.84.43
hash: 31337
file: 109.107.140.248
hash: 31337
file: 101.200.39.128
hash: 31337
file: 80.241.208.176
hash: 31337
file: 194.146.38.191
hash: 31337
file: 195.246.230.115
hash: 31337
file: 207.174.30.91
hash: 31337
file: 169.40.135.88
hash: 31337
file: 173.230.0.145
hash: 31337
file: 149.28.13.194
hash: 443
file: 38.76.169.231
hash: 443
file: 43.112.115.8
hash: 443
domain: namrqlix.hugugnasiri.xyz
file: 129.226.121.12
hash: 443
file: 165.29.86.2
hash: 8989
file: 94.49.35.175
hash: 9090
file: 35.168.186.153
hash: 443
file: 13.58.240.163
hash: 443
file: 130.160.1.225
hash: 443
file: 35.130.170.60
hash: 443
file: 3.18.5.177
hash: 443
file: 209.91.248.6
hash: 8443
file: 153.75.227.142
hash: 1337
file: 159.65.154.209
hash: 1337
file: 83.142.209.60
hash: 1337
file: 172.238.122.85
hash: 1337
file: 62.210.214.18
hash: 1337
file: 144.172.104.22
hash: 1337
file: 87.106.75.120
hash: 1337
file: 79.110.49.85
hash: 8089
file: 65.108.32.130
hash: 8089
file: 34.89.98.172
hash: 8089
file: 20.54.88.98
hash: 8089
file: 34.143.184.190
hash: 8089
file: 35.239.220.64
hash: 8089
file: 113.44.64.117
hash: 7443
file: 175.178.123.42
hash: 8089
file: 159.89.48.54
hash: 7443
file: 107.148.1.64
hash: 9443
file: 122.114.252.115
hash: 12340
file: 151.59.114.129
hash: 8080
file: 146.103.126.127
hash: 9000
file: 185.241.208.118
hash: 4321
file: 185.241.208.118
hash: 4444
file: 104.168.62.5
hash: 54984
file: 185.167.96.179
hash: 1604
file: 138.124.29.208
hash: 80
file: 64.89.162.149
hash: 80
url: https://alabastermarket.top/role/health-json
domain: alabastermarket.top
url: https://alabastermarket.top/role/redirect-html.js
file: 172.94.18.103
hash: 79
file: 122.51.50.44
hash: 4444
file: 122.51.50.44
hash: 443
file: 122.51.50.44
hash: 80
domain: mymrtijp.hugugmadani6.xyz
domain: dl.erickillorinphotostore.com
url: https://saffronarchivehub.top/role/policy-sessionstore.js
domain: saffronarchivehub.top
url: https://saffronarchivehub.top/role/health-json
url: https://saffronarchivehub.top/role/redirect-html.js
domain: www.sharingfile.cloud
domain: linkednewsapi.top
file: 193.169.240.38
hash: 443
file: 104.193.255.99
hash: 8443
url: http://spasopro.at/index.php
url: https://spasopro.at/index.php
file: 104.234.18.91
hash: 80
file: 45.88.91.5
hash: 7004
file: 94.154.32.163
hash: 7004
file: 104.234.18.91
hash: 3001
url: http://104.234.18.91:3001/ws
url: http://104.234.18.91:3001/api/internal/log
url: http://104.234.18.91:3001/api/upload
file: 122.51.50.44
hash: 8080
file: 62.60.226.185
hash: 6003
file: 154.23.189.41
hash: 14782
file: 8.152.2.86
hash: 443
domain: ogonna.ydns.eu
domain: hqvgwxfu.hugugedari.xyz
domain: cmkfhtt.bet303.promo
domain: jksidxrvz.bookdrive.xyz
domain: mlcos.cdnupdate.net
hash: ce9690621c9311446bcf61ec40498a98f8c1b775185064f6dc321d72fafb468d
hash: 8de1ce72b4efd1d4ca0841d79a1fcea463fd8fa84579fe743f58eb6205ccce76
domain: starayadaet.com
domain: marblecologrgr.com
file: 8.152.2.86
hash: 80
file: 8.152.2.86
hash: 8080
file: 16.170.32.198
hash: 7443
file: 36.255.197.120
hash: 443
file: 139.59.106.160
hash: 80
domain: ox3.glamisdunesrentals.com
url: https://ox3.glamisdunesrentals.com/
url: https://ox3.gasturbo88.top/
domain: ox3.gasturbo88.top
domain: nibfzvsq.hugugbime.xyz
domain: rlpxurgo.qurandownload.xyz
domain: znrax5pn.qurandownload.xyz
domain: 98jhjysx.ehtemalatvaamar.xyz
file: 139.59.106.160
hash: 443
file: 80.76.49.194
hash: 56003
file: 80.76.49.194
hash: 56002
file: 80.76.49.194
hash: 56001
hash: 7e49b00bef718eb7e3645d8705e6521b011f66d10f06201e209a8a0511abc81a
hash: b50a05e38e9d04fd5c4dac4f29850649a77bb3ae443639206c908058e45593eb
hash: a05254840b45fcbfd12d09fd416ca860e2cfcab793f4780fa8f138b8f7a86aab
file: 216.250.251.226
hash: 8443
domain: ffynigbdr.barnamenevisi.xyz
domain: hlgwrpbh.mechanicsayalat.xyz
domain: nkxkhfp.bet303.app
file: 193.106.217.106
hash: 80
file: 185.89.255.244
hash: 80
domain: f7a20n5o.ravansalamat.shop
domain: ljj8nzo0.ravansalamat.shop
domain: 933anmoo.azmoonhayeravani.shop
domain: kaiojocv.masirpayambari.xyz
file: 109.199.109.62
hash: 31337
file: 109.199.109.62
hash: 40056
file: 130.94.18.95
hash: 24321
file: 155.103.71.115
hash: 14408
file: 178.255.126.146
hash: 7707
file: 182.23.2.163
hash: 8307
file: 188.137.242.166
hash: 6606
file: 188.137.242.166
hash: 7707
file: 188.137.242.166
hash: 8808
file: 192.3.139.18
hash: 15221
file: 194.116.236.239
hash: 4069
file: 2.27.62.228
hash: 60204
file: 209.99.188.193
hash: 43221
file: 213.165.40.206
hash: 8887
file: 23.235.185.45
hash: 12159
file: 23.235.185.46
hash: 12159
file: 31.76.93.193
hash: 4321
file: 45.225.135.43
hash: 6606
file: 45.225.135.43
hash: 7707
file: 45.225.135.43
hash: 8808
file: 46.101.195.123
hash: 31400
file: 46.151.182.181
hash: 2404
file: 46.246.80.2
hash: 8848
file: 64.89.162.59
hash: 4422
domain: 1364170351-9enmkvd46p.ap-guangzhou.tencentscf.com
file: 178.16.53.137
hash: 443
file: 117.72.159.215
hash: 80
file: 120.55.3.157
hash: 443
domain: t92hw5pi.nazariyeyadgiri.xyz
domain: eeqagxew.maharatmodiran.xyz
domain: owedcphc.ravanshenakhti.shop
file: 120.55.3.157
hash: 80
file: 120.55.3.157
hash: 8080
file: 49.233.136.227
hash: 80
file: 49.233.136.227
hash: 443
file: 49.233.136.227
hash: 8080
domain: srv.gasturbo88.top
url: https://srv.gasturbo88.top/
domain: srv.glamisdunesrentals.com
url: https://srv.glamisdunesrentals.com/
domain: o0irv3h9.ravabetensani.site
domain: bfksnnrp.prozhecart.com
domain: jdxqaihsh.bankefiile.com
file: 43.99.110.114
hash: 80
file: 43.99.110.114
hash: 8080
file: 154.23.189.184
hash: 14782
domain: zjtjokj.quranmohagegin.shop
domain: qlwxqybo.prozhedownload.com
domain: 2sci40h1.ravanshenasiganji.xyz
domain: pipx8iw2.ravanshenasiganji.xyz
domain: msp.shoptopexpress.com
file: 154.23.189.196
hash: 14782
file: 54.196.27.211
hash: 8084
hash: f0ff7f1e0e1544828984d40247d38e38cb4b5d528665098c058e41b24db1d56f
hash: 059182cc6f9d9a6ae2aced1075e5ab3f4e081d55
hash: 1f8b721815bfd4f57aa377369fa5f2ed
hash: 20a1484577dc0b66613cc70619a74dfcaa7da6c19d0a4949cbc83a8e80317fd9
hash: 213cd9fcf2377c5b72e02e4490863dc535bbe871
hash: b82f0b9989f316d6679e1ea067e31cdd
hash: c0b18beb746f408a76371760e64ab37b350419da5292a6fe5b9b83bf7e225257
hash: 87bc65dccd4cb91d55afc1afd257c23acd14570c
hash: a59b7602663fb130c5a85507fbbe29a2
hash: c8889ebbf9516b00d148dfd3b2aee781deb30d27f654039903d31a8ff39d1f4e
hash: b1e46ed3f539868edb60e25b523e77dea71868c2
hash: 2e4973a854f88682666c77394ec3e61e
hash: 68a34fd6765d3a6d791e83c29e783fbe585579e08ea1ad569962e6644a3197a3
hash: 8314be1136b9d1fc76350f1c7ef4cf8fe52a4acb
hash: e06aacd6139288d5bea4a676ee0c2404
hash: 73b2c01ca7f082bf4d999426e07886144b7bccaecead90e1acf661695fda39b1
hash: 13d8b44123e6f9f9a58a9359d0a772566f4eff3b
hash: 93996829b15b3cf1bb4bd79f2091d72f
hash: 3d008cb4d346a95396868f786ec6d4fe7e12a0451768f957664abba7469f2cf0
hash: e7026b2f6adadbf070e9926e1d4b79a65044cd5c
hash: 92bc3b1ba378c14e601c4e617ec7c422
hash: 8a82da328a3db0fca63f31e7b464b5989cecfd619ebab0b238c07b63544bf823
hash: be34707cb56d7b41393d14c67b4ad8626c4519d7
hash: 39a19118f2d38bfdb9421f69a84e5dec
hash: 574c4503c071e8e8892d267e786acdf811970d4f927cf4536a870c8ba2fc7a13
hash: fb5a09899b06e4ed91b14a9e67f5ece2a558a877
hash: 0ff94617c08fe032327753b286011da5
hash: d049d136b7c8aaf342ffd924e09d23b2ca168552b3a6b3cf68913657b68fdf37
hash: 0ca01817ecdf07b17f89b5e8a070e541c5dd922b
hash: c843d4538bb0f0c1b31e057ec7d8d8c1
hash: 162a1c2e10796e24e94283907b9af34f7cbb9a38002e374afa715f7d101248fc
hash: 164493c98f5172618a090b336b9ddf41d90f5751
hash: 537013864063eb458e47b3fcbbffbc8f
hash: 7458d3a59fa6682ac4d2e3070ccbd0c223607eed768bd7a99d14f6dc5bfb88b9
hash: 07c5bd17e0d1930f324aaa02369fd7e85a6585d6
hash: 700fab1c874a6e5948af14c7d122bd48
hash: 985a2c4839ac4ded904d1d9b354d2fbe9e24c36e963d171d7e21130a4c0f66d4
hash: e562387236169b80911a4081e772ac1151942462
hash: 173e47952a519cedcbc37d7468c0afe5
hash: b3e6200b05e579b9577686e9f510338b197fe392483f3d2eb50398d3097573cb
hash: 2a6ff4571b915d61b60ecc2922d342f07bdfb71d
hash: d13cad682fd5abb767313f79c1732822
hash: c2a383a0dff5e69299443a119bb73f2b76f3f9c0f3951330ffea5db26fc3797f
hash: 60b2674a3acda83abedd7173355a9473f2904f17
hash: 624eb52464199c7dfea8f082c5b4e9f7
hash: 9a04ce5c1ed6e353d8d8d936fefba4517ecc8f6777e5f866178dba084ae90d8a
hash: cf5058b0d233abf4abf55bd13597f9b07c5d2eed
hash: 18b93f31c49e4302e3fd26764b6ad37a
domain: ravandarmani.xyz
domain: fdktfbbn.jam-jahani.com
domain: qeyshvibv.azmoonzare.online

Source: ThreatFox MISP Feed

Published: Thu Jun 11 2026

ThreatFox IOCs for 2026-06-11

Medium

Malwaretype:osint tlp:white

Published: Thu Jun 11 2026 (06/11/2026, 00:00:00 UTC)

Source: ThreatFox MISP Feed

Description

ThreatFox IOCs for 2026-06-11

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 06/12/2026, 00:14:59 UTC

Technical Analysis

Potential Impact

Mitigation Recommendations

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Threat Level: 2
Analysis: 1
Distribution: 3
Uuid: ca3d5a3c-3494-4276-9d05-7ab9135b4837
Original Timestamp: 1781222586

Indicators of Compromise

File

Value	Description	Copy
file45.67.84.76	Cobalt Strike botnet C2 server (confidence level: 86%)
file185.190.212.155	Havoc botnet C2 server (confidence level: 100%)
file193.233.130.136	Cobalt Strike botnet C2 server (confidence level: 99%)
file156.234.211.138	Cobalt Strike botnet C2 server (confidence level: 50%)
file156.234.211.165	Cobalt Strike botnet C2 server (confidence level: 50%)
file219.92.2.65	Cobalt Strike botnet C2 server (confidence level: 50%)
file18.175.227.88	Cobalt Strike botnet C2 server (confidence level: 50%)
file192.144.213.21	Cobalt Strike botnet C2 server (confidence level: 50%)
file41.234.41.113	AsyncRAT botnet C2 server (confidence level: 50%)
file64.89.160.198	Remcos botnet C2 server (confidence level: 75%)
file193.106.8.24	Havoc botnet C2 server (confidence level: 100%)
file185.89.214.29	Havoc botnet C2 server (confidence level: 99%)
file47.92.206.63	Cobalt Strike botnet C2 server (confidence level: 100%)
file47.92.206.63	Cobalt Strike botnet C2 server (confidence level: 100%)
file47.92.206.63	Cobalt Strike botnet C2 server (confidence level: 100%)
file34.92.128.98	Cobalt Strike botnet C2 server (confidence level: 100%)
file34.92.128.98	Cobalt Strike botnet C2 server (confidence level: 100%)
file18.162.74.188	ValleyRAT botnet C2 server (confidence level: 100%)
file43.160.193.90	ValleyRAT botnet C2 server (confidence level: 100%)
file1.94.184.17	VShell botnet C2 server (confidence level: 100%)
file104.233.154.139	VShell botnet C2 server (confidence level: 100%)
file45.38.20.122	AdaptixC2 botnet C2 server (confidence level: 100%)
file45.38.20.122	AdaptixC2 botnet C2 server (confidence level: 100%)
file45.38.20.122	AdaptixC2 botnet C2 server (confidence level: 100%)
file139.5.108.17	Cobalt Strike botnet C2 server (confidence level: 100%)
file49.233.105.49	Cobalt Strike botnet C2 server (confidence level: 100%)
file160.202.230.103	Cobalt Strike botnet C2 server (confidence level: 100%)
file211.159.225.77	Cobalt Strike botnet C2 server (confidence level: 100%)
file124.220.41.22	Cobalt Strike botnet C2 server (confidence level: 100%)
file43.136.180.88	Cobalt Strike botnet C2 server (confidence level: 100%)
file47.121.181.148	Cobalt Strike botnet C2 server (confidence level: 100%)
file43.136.180.88	Cobalt Strike botnet C2 server (confidence level: 100%)
file117.72.220.212	Cobalt Strike botnet C2 server (confidence level: 100%)
file120.55.3.157	Cobalt Strike botnet C2 server (confidence level: 100%)
file45.87.53.6	Cobalt Strike botnet C2 server (confidence level: 100%)
file209.99.191.186	Unknown malware botnet C2 server (confidence level: 75%)
file8.219.158.30	Cobalt Strike botnet C2 server (confidence level: 100%)
file103.202.61.220	Havoc botnet C2 server (confidence level: 100%)
file186.246.16.124	Havoc botnet C2 server (confidence level: 100%)
file175.98.132.116	Sliver botnet C2 server (confidence level: 91%)
file45.67.222.21	Havoc botnet C2 server (confidence level: 85%)
file2.26.228.27	Havoc botnet C2 server (confidence level: 100%)
file47.121.181.148	Cobalt Strike botnet C2 server (confidence level: 100%)
file47.121.181.148	Cobalt Strike botnet C2 server (confidence level: 100%)
file209.99.184.216	Unknown malware botnet C2 server (confidence level: 75%)
file209.99.184.216	Unknown malware botnet C2 server (confidence level: 75%)
file209.99.184.216	Unknown malware botnet C2 server (confidence level: 75%)
file160.202.230.103	Cobalt Strike botnet C2 server (confidence level: 100%)
file160.202.230.103	Cobalt Strike botnet C2 server (confidence level: 100%)
file64.89.162.82	AsyncRAT botnet C2 server (confidence level: 100%)
file182.23.2.163	Remcos botnet C2 server (confidence level: 75%)
file182.23.2.163	Remcos botnet C2 server (confidence level: 75%)
file182.23.2.163	Remcos botnet C2 server (confidence level: 75%)
file206.81.21.156	AdaptixC2 botnet C2 server (confidence level: 75%)
file43.136.180.88	Cobalt Strike botnet C2 server (confidence level: 100%)
file211.159.225.77	Cobalt Strike botnet C2 server (confidence level: 100%)
file211.159.225.77	Cobalt Strike botnet C2 server (confidence level: 100%)
file156.234.211.162	Cobalt Strike botnet C2 server (confidence level: 50%)
file117.72.159.215	Cobalt Strike botnet C2 server (confidence level: 50%)
file114.132.89.132	Cobalt Strike botnet C2 server (confidence level: 50%)
file154.201.68.191	Cobalt Strike botnet C2 server (confidence level: 50%)
file114.134.187.38	Cobalt Strike botnet C2 server (confidence level: 50%)
file20.15.58.107	Cobalt Strike botnet C2 server (confidence level: 50%)
file218.244.142.4	Cobalt Strike botnet C2 server (confidence level: 50%)
file114.132.199.129	Cobalt Strike botnet C2 server (confidence level: 50%)
file135.125.196.5	Cobalt Strike botnet C2 server (confidence level: 50%)
file190.90.147.38	Cobalt Strike botnet C2 server (confidence level: 50%)
file120.26.208.96	Cobalt Strike botnet C2 server (confidence level: 50%)
file134.65.51.39	Cobalt Strike botnet C2 server (confidence level: 50%)
file159.89.167.49	Unknown malware botnet C2 server (confidence level: 50%)
file20.197.43.238	Unknown malware botnet C2 server (confidence level: 50%)
file57.162.106.141	Unknown malware botnet C2 server (confidence level: 50%)
file103.85.226.42	Unknown malware botnet C2 server (confidence level: 50%)
file173.249.33.186	Unknown malware botnet C2 server (confidence level: 50%)
file34.172.171.254	Unknown malware botnet C2 server (confidence level: 50%)
file101.96.111.198	Unknown malware botnet C2 server (confidence level: 50%)
file51.159.82.179	Unknown malware botnet C2 server (confidence level: 50%)
file190.20.96.35	Unknown malware botnet C2 server (confidence level: 50%)
file195.246.230.115	Unknown malware botnet C2 server (confidence level: 50%)
file203.189.71.122	Unknown malware botnet C2 server (confidence level: 50%)
file200.33.163.61	Unknown malware botnet C2 server (confidence level: 50%)
file20.197.43.238	Unknown malware botnet C2 server (confidence level: 50%)
file152.89.16.45	Unknown malware botnet C2 server (confidence level: 50%)
file46.182.217.204	Unknown malware botnet C2 server (confidence level: 50%)
file34.128.109.190	Unknown malware botnet C2 server (confidence level: 50%)
file54.86.242.233	Unknown malware botnet C2 server (confidence level: 50%)
file202.10.42.113	Unknown malware botnet C2 server (confidence level: 50%)
file62.84.172.151	Sliver botnet C2 server (confidence level: 50%)
file66.116.238.103	Sliver botnet C2 server (confidence level: 50%)
file5.230.201.54	Sliver botnet C2 server (confidence level: 50%)
file95.111.239.243	Sliver botnet C2 server (confidence level: 50%)
file185.163.2.10	Sliver botnet C2 server (confidence level: 50%)
file103.160.59.17	Sliver botnet C2 server (confidence level: 50%)
file213.21.254.240	Sliver botnet C2 server (confidence level: 50%)
file185.225.226.85	Sliver botnet C2 server (confidence level: 50%)
file107.189.11.149	Sliver botnet C2 server (confidence level: 50%)
file80.241.219.92	Sliver botnet C2 server (confidence level: 50%)
file74.48.108.73	Sliver botnet C2 server (confidence level: 50%)
file91.236.230.152	Sliver botnet C2 server (confidence level: 50%)
file172.105.114.236	Sliver botnet C2 server (confidence level: 50%)
file159.65.22.41	Sliver botnet C2 server (confidence level: 50%)
file194.87.24.131	Sliver botnet C2 server (confidence level: 50%)
file193.242.184.158	Sliver botnet C2 server (confidence level: 50%)
file185.241.208.118	Sliver botnet C2 server (confidence level: 50%)
file95.182.84.43	Sliver botnet C2 server (confidence level: 50%)
file109.107.140.248	Sliver botnet C2 server (confidence level: 50%)
file101.200.39.128	Sliver botnet C2 server (confidence level: 50%)
file80.241.208.176	Sliver botnet C2 server (confidence level: 50%)
file194.146.38.191	Sliver botnet C2 server (confidence level: 50%)
file195.246.230.115	Sliver botnet C2 server (confidence level: 50%)
file207.174.30.91	Sliver botnet C2 server (confidence level: 50%)
file169.40.135.88	Sliver botnet C2 server (confidence level: 50%)
file173.230.0.145	Sliver botnet C2 server (confidence level: 50%)
file149.28.13.194	Unknown malware botnet C2 server (confidence level: 50%)
file38.76.169.231	Unknown malware botnet C2 server (confidence level: 50%)
file43.112.115.8	Unknown malware botnet C2 server (confidence level: 50%)
file129.226.121.12	Unknown malware botnet C2 server (confidence level: 50%)
file165.29.86.2	Unknown malware botnet C2 server (confidence level: 50%)
file94.49.35.175	Unknown malware botnet C2 server (confidence level: 50%)
file35.168.186.153	Unknown malware botnet C2 server (confidence level: 50%)
file13.58.240.163	Unknown malware botnet C2 server (confidence level: 50%)
file130.160.1.225	Unknown malware botnet C2 server (confidence level: 50%)
file35.130.170.60	Unknown malware botnet C2 server (confidence level: 50%)
file3.18.5.177	Unknown malware botnet C2 server (confidence level: 50%)
file209.91.248.6	Unknown malware botnet C2 server (confidence level: 50%)
file153.75.227.142	Empire Downloader botnet C2 server (confidence level: 50%)
file159.65.154.209	Empire Downloader botnet C2 server (confidence level: 50%)
file83.142.209.60	Empire Downloader botnet C2 server (confidence level: 50%)
file172.238.122.85	Empire Downloader botnet C2 server (confidence level: 50%)
file62.210.214.18	Empire Downloader botnet C2 server (confidence level: 50%)
file144.172.104.22	Empire Downloader botnet C2 server (confidence level: 50%)
file87.106.75.120	Empire Downloader botnet C2 server (confidence level: 50%)
file79.110.49.85	Unknown malware botnet C2 server (confidence level: 50%)
file65.108.32.130	Unknown malware botnet C2 server (confidence level: 50%)
file34.89.98.172	Unknown malware botnet C2 server (confidence level: 50%)
file20.54.88.98	Unknown malware botnet C2 server (confidence level: 50%)
file34.143.184.190	Unknown malware botnet C2 server (confidence level: 50%)
file35.239.220.64	Unknown malware botnet C2 server (confidence level: 50%)
file113.44.64.117	Unknown malware botnet C2 server (confidence level: 50%)
file175.178.123.42	Unknown malware botnet C2 server (confidence level: 50%)
file159.89.48.54	Unknown malware botnet C2 server (confidence level: 50%)
file107.148.1.64	Unknown malware botnet C2 server (confidence level: 50%)
file122.114.252.115	ShadowPad botnet C2 server (confidence level: 50%)
file151.59.114.129	SectopRAT botnet C2 server (confidence level: 50%)
file146.103.126.127	SectopRAT botnet C2 server (confidence level: 50%)
file185.241.208.118	AdaptixC2 botnet C2 server (confidence level: 50%)
file185.241.208.118	AdaptixC2 botnet C2 server (confidence level: 50%)
file104.168.62.5	Nanocore RAT botnet C2 server (confidence level: 50%)
file185.167.96.179	DarkComet botnet C2 server (confidence level: 50%)
file138.124.29.208	Unknown malware botnet C2 server (confidence level: 50%)
file64.89.162.149	MooBot botnet C2 server (confidence level: 50%)
file172.94.18.103	AsyncRAT botnet C2 server (confidence level: 100%)
file122.51.50.44	Cobalt Strike botnet C2 server (confidence level: 100%)
file122.51.50.44	Cobalt Strike botnet C2 server (confidence level: 100%)
file122.51.50.44	Cobalt Strike botnet C2 server (confidence level: 100%)
file193.169.240.38	Unknown malware botnet C2 server (confidence level: 50%)
file104.193.255.99	Unknown malware botnet C2 server (confidence level: 50%)
file104.234.18.91	Unknown malware botnet C2 server (confidence level: 100%)
file45.88.91.5	XWorm botnet C2 server (confidence level: 75%)
file94.154.32.163	XWorm botnet C2 server (confidence level: 75%)
file104.234.18.91	Unknown malware botnet C2 server (confidence level: 100%)
file122.51.50.44	Cobalt Strike botnet C2 server (confidence level: 100%)
file62.60.226.185	Quasar RAT botnet C2 server (confidence level: 100%)
file154.23.189.41	Quasar RAT botnet C2 server (confidence level: 100%)
file8.152.2.86	Cobalt Strike botnet C2 server (confidence level: 100%)
file8.152.2.86	Cobalt Strike botnet C2 server (confidence level: 100%)
file8.152.2.86	Cobalt Strike botnet C2 server (confidence level: 100%)
file16.170.32.198	Unknown malware botnet C2 server (confidence level: 100%)
file36.255.197.120	Havoc botnet C2 server (confidence level: 100%)
file139.59.106.160	Havoc botnet C2 server (confidence level: 100%)
file139.59.106.160	Havoc botnet C2 server (confidence level: 100%)
file80.76.49.194	PureRAT botnet C2 server (confidence level: 75%)
file80.76.49.194	PureRAT botnet C2 server (confidence level: 75%)
file80.76.49.194	PureRAT botnet C2 server (confidence level: 75%)
file216.250.251.226	PureLogs Stealer botnet C2 server (confidence level: 75%)
file193.106.217.106	Meterpreter botnet C2 server (confidence level: 100%)
file185.89.255.244	Meterpreter botnet C2 server (confidence level: 91%)
file109.199.109.62	Sliver botnet C2 server (confidence level: 75%)
file109.199.109.62	Sliver botnet C2 server (confidence level: 75%)
file130.94.18.95	AdaptixC2 botnet C2 server (confidence level: 75%)
file155.103.71.115	Remcos botnet C2 server (confidence level: 75%)
file178.255.126.146	AsyncRAT botnet C2 server (confidence level: 75%)
file182.23.2.163	Remcos botnet C2 server (confidence level: 75%)
file188.137.242.166	AsyncRAT botnet C2 server (confidence level: 75%)
file188.137.242.166	AsyncRAT botnet C2 server (confidence level: 75%)
file188.137.242.166	AsyncRAT botnet C2 server (confidence level: 75%)
file192.3.139.18	AdaptixC2 botnet C2 server (confidence level: 75%)
file194.116.236.239	Remcos botnet C2 server (confidence level: 75%)
file2.27.62.228	Remcos botnet C2 server (confidence level: 75%)
file209.99.188.193	AdaptixC2 botnet C2 server (confidence level: 75%)
file213.165.40.206	BianLian botnet C2 server (confidence level: 75%)
file23.235.185.45	DCRat botnet C2 server (confidence level: 75%)
file23.235.185.46	DCRat botnet C2 server (confidence level: 75%)
file31.76.93.193	AdaptixC2 botnet C2 server (confidence level: 75%)
file45.225.135.43	AsyncRAT botnet C2 server (confidence level: 75%)
file45.225.135.43	AsyncRAT botnet C2 server (confidence level: 75%)
file45.225.135.43	AsyncRAT botnet C2 server (confidence level: 75%)
file46.101.195.123	Evilginx botnet C2 server (confidence level: 75%)
file46.151.182.181	Remcos botnet C2 server (confidence level: 75%)
file46.246.80.2	DCRat botnet C2 server (confidence level: 75%)
file64.89.162.59	AsyncRAT botnet C2 server (confidence level: 75%)
file178.16.53.137	Unknown malware payload delivery server (confidence level: 100%)
file117.72.159.215	Cobalt Strike botnet C2 server (confidence level: 100%)
file120.55.3.157	Cobalt Strike botnet C2 server (confidence level: 100%)
file120.55.3.157	Cobalt Strike botnet C2 server (confidence level: 100%)
file120.55.3.157	Cobalt Strike botnet C2 server (confidence level: 100%)
file49.233.136.227	Cobalt Strike botnet C2 server (confidence level: 100%)
file49.233.136.227	Cobalt Strike botnet C2 server (confidence level: 100%)
file49.233.136.227	Cobalt Strike botnet C2 server (confidence level: 100%)
file43.99.110.114	Cobalt Strike botnet C2 server (confidence level: 100%)
file43.99.110.114	Cobalt Strike botnet C2 server (confidence level: 100%)
file154.23.189.184	Quasar RAT botnet C2 server (confidence level: 100%)
file154.23.189.196	Quasar RAT botnet C2 server (confidence level: 100%)
file54.196.27.211	VShell botnet C2 server (confidence level: 100%)

Hash

Value	Description	Copy
hash3389	Cobalt Strike botnet C2 server (confidence level: 86%)
hash8eac8373cb9b6a8004942871ebc691d900a8116c9dede5e3a222392227033245	Unknown malware payload (confidence level: 75%)
hash13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96	Unknown malware payload (confidence level: 75%)
hash07353da1a94a7dc214947fc35f134452b4dba8a6ae81464328d9cf0d1cedc6ba	Unknown malware payload (confidence level: 75%)
hashbbc8da2cceb3a174e2b0df87bc43c54d3cf3edadb585658bb65517c8f88249b8	Unknown malware payload (confidence level: 75%)
hash443	Havoc botnet C2 server (confidence level: 100%)
hash3389	Cobalt Strike botnet C2 server (confidence level: 99%)
hash8821	Cobalt Strike botnet C2 server (confidence level: 50%)
hash8821	Cobalt Strike botnet C2 server (confidence level: 50%)
hash443	Cobalt Strike botnet C2 server (confidence level: 50%)
hash80	Cobalt Strike botnet C2 server (confidence level: 50%)
hash18443	Cobalt Strike botnet C2 server (confidence level: 50%)
hash8808	AsyncRAT botnet C2 server (confidence level: 50%)
hash8080	Remcos botnet C2 server (confidence level: 75%)
hash443	Havoc botnet C2 server (confidence level: 100%)
hash443	Havoc botnet C2 server (confidence level: 99%)
hash443	Cobalt Strike botnet C2 server (confidence level: 100%)
hash80	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hashb56a2ccafe31b6c664c021ec418a660661e5d6d87e1c339beba3b7a4b684d067	AMOS payload (confidence level: 100%)
hash01e33f12a8ee57c89624aeeeb97e57896927483d1442eea22ec6bfddc12f8879	AMOS payload (confidence level: 100%)
hash9a2869a42f54beb07d4d56a16cd56f507a1ae5a9df2e4d816776472cbf4438c6	AMOS payload (confidence level: 100%)
hash7c69d70092676725b6e9269e08f842b22a21eff319240a31b2dfc44147d05d05	Unknown malware payload (confidence level: 75%)
hash443	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hash112	ValleyRAT botnet C2 server (confidence level: 100%)
hash6666	ValleyRAT botnet C2 server (confidence level: 100%)
hash60002	VShell botnet C2 server (confidence level: 100%)
hash888	VShell botnet C2 server (confidence level: 100%)
hash443	AdaptixC2 botnet C2 server (confidence level: 100%)
hash80	AdaptixC2 botnet C2 server (confidence level: 100%)
hash8080	AdaptixC2 botnet C2 server (confidence level: 100%)
hash443	Cobalt Strike botnet C2 server (confidence level: 100%)
hash4444	Cobalt Strike botnet C2 server (confidence level: 100%)
hash80	Cobalt Strike botnet C2 server (confidence level: 100%)
hash80	Cobalt Strike botnet C2 server (confidence level: 100%)
hash443	Cobalt Strike botnet C2 server (confidence level: 100%)
hash443	Cobalt Strike botnet C2 server (confidence level: 100%)
hash443	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hash10000	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8443	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8765	Unknown malware botnet C2 server (confidence level: 75%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hash443	Havoc botnet C2 server (confidence level: 100%)
hash443	Havoc botnet C2 server (confidence level: 100%)
hash9443	Sliver botnet C2 server (confidence level: 91%)
hash3389	Havoc botnet C2 server (confidence level: 85%)
hash443	Havoc botnet C2 server (confidence level: 100%)
hash80	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hash56001	Unknown malware botnet C2 server (confidence level: 75%)
hash56002	Unknown malware botnet C2 server (confidence level: 75%)
hash56003	Unknown malware botnet C2 server (confidence level: 75%)
hash443	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hash6606	AsyncRAT botnet C2 server (confidence level: 100%)
hash1230	Remcos botnet C2 server (confidence level: 75%)
hash4048	Remcos botnet C2 server (confidence level: 75%)
hash4814	Remcos botnet C2 server (confidence level: 75%)
hash4321	AdaptixC2 botnet C2 server (confidence level: 75%)
hash80	Cobalt Strike botnet C2 server (confidence level: 100%)
hash443	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8821	Cobalt Strike botnet C2 server (confidence level: 50%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 50%)
hash8443	Cobalt Strike botnet C2 server (confidence level: 50%)
hash50050	Cobalt Strike botnet C2 server (confidence level: 50%)
hash50050	Cobalt Strike botnet C2 server (confidence level: 50%)
hash50050	Cobalt Strike botnet C2 server (confidence level: 50%)
hash50050	Cobalt Strike botnet C2 server (confidence level: 50%)
hash1443	Cobalt Strike botnet C2 server (confidence level: 50%)
hash50050	Cobalt Strike botnet C2 server (confidence level: 50%)
hash50050	Cobalt Strike botnet C2 server (confidence level: 50%)
hash50050	Cobalt Strike botnet C2 server (confidence level: 50%)
hash443	Cobalt Strike botnet C2 server (confidence level: 50%)
hash3333	Unknown malware botnet C2 server (confidence level: 50%)
hash3333	Unknown malware botnet C2 server (confidence level: 50%)
hash3333	Unknown malware botnet C2 server (confidence level: 50%)
hash8443	Unknown malware botnet C2 server (confidence level: 50%)
hash3333	Unknown malware botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash3333	Unknown malware botnet C2 server (confidence level: 50%)
hash3333	Unknown malware botnet C2 server (confidence level: 50%)
hash3333	Unknown malware botnet C2 server (confidence level: 50%)
hash3333	Unknown malware botnet C2 server (confidence level: 50%)
hash3333	Unknown malware botnet C2 server (confidence level: 50%)
hash3333	Unknown malware botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash3333	Unknown malware botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash3333	Unknown malware botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash8443	Unknown malware botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash31337	Sliver botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash8989	Unknown malware botnet C2 server (confidence level: 50%)
hash9090	Unknown malware botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash8443	Unknown malware botnet C2 server (confidence level: 50%)
hash1337	Empire Downloader botnet C2 server (confidence level: 50%)
hash1337	Empire Downloader botnet C2 server (confidence level: 50%)
hash1337	Empire Downloader botnet C2 server (confidence level: 50%)
hash1337	Empire Downloader botnet C2 server (confidence level: 50%)
hash1337	Empire Downloader botnet C2 server (confidence level: 50%)
hash1337	Empire Downloader botnet C2 server (confidence level: 50%)
hash1337	Empire Downloader botnet C2 server (confidence level: 50%)
hash8089	Unknown malware botnet C2 server (confidence level: 50%)
hash8089	Unknown malware botnet C2 server (confidence level: 50%)
hash8089	Unknown malware botnet C2 server (confidence level: 50%)
hash8089	Unknown malware botnet C2 server (confidence level: 50%)
hash8089	Unknown malware botnet C2 server (confidence level: 50%)
hash8089	Unknown malware botnet C2 server (confidence level: 50%)
hash7443	Unknown malware botnet C2 server (confidence level: 50%)
hash8089	Unknown malware botnet C2 server (confidence level: 50%)
hash7443	Unknown malware botnet C2 server (confidence level: 50%)
hash9443	Unknown malware botnet C2 server (confidence level: 50%)
hash12340	ShadowPad botnet C2 server (confidence level: 50%)
hash8080	SectopRAT botnet C2 server (confidence level: 50%)
hash9000	SectopRAT botnet C2 server (confidence level: 50%)
hash4321	AdaptixC2 botnet C2 server (confidence level: 50%)
hash4444	AdaptixC2 botnet C2 server (confidence level: 50%)
hash54984	Nanocore RAT botnet C2 server (confidence level: 50%)
hash1604	DarkComet botnet C2 server (confidence level: 50%)
hash80	Unknown malware botnet C2 server (confidence level: 50%)
hash80	MooBot botnet C2 server (confidence level: 50%)
hash79	AsyncRAT botnet C2 server (confidence level: 100%)
hash4444	Cobalt Strike botnet C2 server (confidence level: 100%)
hash443	Cobalt Strike botnet C2 server (confidence level: 100%)
hash80	Cobalt Strike botnet C2 server (confidence level: 100%)
hash443	Unknown malware botnet C2 server (confidence level: 50%)
hash8443	Unknown malware botnet C2 server (confidence level: 50%)
hash80	Unknown malware botnet C2 server (confidence level: 100%)
hash7004	XWorm botnet C2 server (confidence level: 75%)
hash7004	XWorm botnet C2 server (confidence level: 75%)
hash3001	Unknown malware botnet C2 server (confidence level: 100%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hash6003	Quasar RAT botnet C2 server (confidence level: 100%)
hash14782	Quasar RAT botnet C2 server (confidence level: 100%)
hash443	Cobalt Strike botnet C2 server (confidence level: 100%)
hashce9690621c9311446bcf61ec40498a98f8c1b775185064f6dc321d72fafb468d	Unknown malware payload (confidence level: 75%)
hash8de1ce72b4efd1d4ca0841d79a1fcea463fd8fa84579fe743f58eb6205ccce76	Unknown malware payload (confidence level: 75%)
hash80	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hash7443	Unknown malware botnet C2 server (confidence level: 100%)
hash443	Havoc botnet C2 server (confidence level: 100%)
hash80	Havoc botnet C2 server (confidence level: 100%)
hash443	Havoc botnet C2 server (confidence level: 100%)
hash56003	PureRAT botnet C2 server (confidence level: 75%)
hash56002	PureRAT botnet C2 server (confidence level: 75%)
hash56001	PureRAT botnet C2 server (confidence level: 75%)
hash7e49b00bef718eb7e3645d8705e6521b011f66d10f06201e209a8a0511abc81a	PureRAT payload (confidence level: 75%)
hashb50a05e38e9d04fd5c4dac4f29850649a77bb3ae443639206c908058e45593eb	PureRAT payload (confidence level: 75%)
hasha05254840b45fcbfd12d09fd416ca860e2cfcab793f4780fa8f138b8f7a86aab	PureRAT payload (confidence level: 75%)
hash8443	PureLogs Stealer botnet C2 server (confidence level: 75%)
hash80	Meterpreter botnet C2 server (confidence level: 100%)
hash80	Meterpreter botnet C2 server (confidence level: 91%)
hash31337	Sliver botnet C2 server (confidence level: 75%)
hash40056	Sliver botnet C2 server (confidence level: 75%)
hash24321	AdaptixC2 botnet C2 server (confidence level: 75%)
hash14408	Remcos botnet C2 server (confidence level: 75%)
hash7707	AsyncRAT botnet C2 server (confidence level: 75%)
hash8307	Remcos botnet C2 server (confidence level: 75%)
hash6606	AsyncRAT botnet C2 server (confidence level: 75%)
hash7707	AsyncRAT botnet C2 server (confidence level: 75%)
hash8808	AsyncRAT botnet C2 server (confidence level: 75%)
hash15221	AdaptixC2 botnet C2 server (confidence level: 75%)
hash4069	Remcos botnet C2 server (confidence level: 75%)
hash60204	Remcos botnet C2 server (confidence level: 75%)
hash43221	AdaptixC2 botnet C2 server (confidence level: 75%)
hash8887	BianLian botnet C2 server (confidence level: 75%)
hash12159	DCRat botnet C2 server (confidence level: 75%)
hash12159	DCRat botnet C2 server (confidence level: 75%)
hash4321	AdaptixC2 botnet C2 server (confidence level: 75%)
hash6606	AsyncRAT botnet C2 server (confidence level: 75%)
hash7707	AsyncRAT botnet C2 server (confidence level: 75%)
hash8808	AsyncRAT botnet C2 server (confidence level: 75%)
hash31400	Evilginx botnet C2 server (confidence level: 75%)
hash2404	Remcos botnet C2 server (confidence level: 75%)
hash8848	DCRat botnet C2 server (confidence level: 75%)
hash4422	AsyncRAT botnet C2 server (confidence level: 75%)
hash443	Unknown malware payload delivery server (confidence level: 100%)
hash80	Cobalt Strike botnet C2 server (confidence level: 100%)
hash443	Cobalt Strike botnet C2 server (confidence level: 100%)
hash80	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hash80	Cobalt Strike botnet C2 server (confidence level: 100%)
hash443	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hash80	Cobalt Strike botnet C2 server (confidence level: 100%)
hash8080	Cobalt Strike botnet C2 server (confidence level: 100%)
hash14782	Quasar RAT botnet C2 server (confidence level: 100%)
hash14782	Quasar RAT botnet C2 server (confidence level: 100%)
hash8084	VShell botnet C2 server (confidence level: 100%)
hashf0ff7f1e0e1544828984d40247d38e38cb4b5d528665098c058e41b24db1d56f	Coinminer payload (confidence level: 95%)
hash059182cc6f9d9a6ae2aced1075e5ab3f4e081d55	Coinminer payload (confidence level: 95%)
hash1f8b721815bfd4f57aa377369fa5f2ed	Coinminer payload (confidence level: 95%)
hash20a1484577dc0b66613cc70619a74dfcaa7da6c19d0a4949cbc83a8e80317fd9	Coinminer payload (confidence level: 95%)
hash213cd9fcf2377c5b72e02e4490863dc535bbe871	Coinminer payload (confidence level: 95%)
hashb82f0b9989f316d6679e1ea067e31cdd	Coinminer payload (confidence level: 95%)
hashc0b18beb746f408a76371760e64ab37b350419da5292a6fe5b9b83bf7e225257	Nanocore RAT payload (confidence level: 95%)
hash87bc65dccd4cb91d55afc1afd257c23acd14570c	Nanocore RAT payload (confidence level: 95%)
hasha59b7602663fb130c5a85507fbbe29a2	Nanocore RAT payload (confidence level: 95%)
hashc8889ebbf9516b00d148dfd3b2aee781deb30d27f654039903d31a8ff39d1f4e	GootKit payload (confidence level: 95%)
hashb1e46ed3f539868edb60e25b523e77dea71868c2	GootKit payload (confidence level: 95%)
hash2e4973a854f88682666c77394ec3e61e	GootKit payload (confidence level: 95%)
hash68a34fd6765d3a6d791e83c29e783fbe585579e08ea1ad569962e6644a3197a3	FireCrypt payload (confidence level: 95%)
hash8314be1136b9d1fc76350f1c7ef4cf8fe52a4acb	FireCrypt payload (confidence level: 95%)
hashe06aacd6139288d5bea4a676ee0c2404	FireCrypt payload (confidence level: 95%)
hash73b2c01ca7f082bf4d999426e07886144b7bccaecead90e1acf661695fda39b1	FireCrypt payload (confidence level: 95%)
hash13d8b44123e6f9f9a58a9359d0a772566f4eff3b	FireCrypt payload (confidence level: 95%)
hash93996829b15b3cf1bb4bd79f2091d72f	FireCrypt payload (confidence level: 95%)
hash3d008cb4d346a95396868f786ec6d4fe7e12a0451768f957664abba7469f2cf0	FireCrypt payload (confidence level: 95%)
hashe7026b2f6adadbf070e9926e1d4b79a65044cd5c	FireCrypt payload (confidence level: 95%)
hash92bc3b1ba378c14e601c4e617ec7c422	FireCrypt payload (confidence level: 95%)
hash8a82da328a3db0fca63f31e7b464b5989cecfd619ebab0b238c07b63544bf823	StrelaStealer payload (confidence level: 95%)
hashbe34707cb56d7b41393d14c67b4ad8626c4519d7	StrelaStealer payload (confidence level: 95%)
hash39a19118f2d38bfdb9421f69a84e5dec	StrelaStealer payload (confidence level: 95%)
hash574c4503c071e8e8892d267e786acdf811970d4f927cf4536a870c8ba2fc7a13	MASS Logger payload (confidence level: 95%)
hashfb5a09899b06e4ed91b14a9e67f5ece2a558a877	MASS Logger payload (confidence level: 95%)
hash0ff94617c08fe032327753b286011da5	MASS Logger payload (confidence level: 95%)
hashd049d136b7c8aaf342ffd924e09d23b2ca168552b3a6b3cf68913657b68fdf37	GCleaner payload (confidence level: 95%)
hash0ca01817ecdf07b17f89b5e8a070e541c5dd922b	GCleaner payload (confidence level: 95%)
hashc843d4538bb0f0c1b31e057ec7d8d8c1	GCleaner payload (confidence level: 95%)
hash162a1c2e10796e24e94283907b9af34f7cbb9a38002e374afa715f7d101248fc	Phorpiex payload (confidence level: 95%)
hash164493c98f5172618a090b336b9ddf41d90f5751	Phorpiex payload (confidence level: 95%)
hash537013864063eb458e47b3fcbbffbc8f	Phorpiex payload (confidence level: 95%)
hash7458d3a59fa6682ac4d2e3070ccbd0c223607eed768bd7a99d14f6dc5bfb88b9	Phorpiex payload (confidence level: 95%)
hash07c5bd17e0d1930f324aaa02369fd7e85a6585d6	Phorpiex payload (confidence level: 95%)
hash700fab1c874a6e5948af14c7d122bd48	Phorpiex payload (confidence level: 95%)
hash985a2c4839ac4ded904d1d9b354d2fbe9e24c36e963d171d7e21130a4c0f66d4	troystealer payload (confidence level: 95%)
hashe562387236169b80911a4081e772ac1151942462	troystealer payload (confidence level: 95%)
hash173e47952a519cedcbc37d7468c0afe5	troystealer payload (confidence level: 95%)
hashb3e6200b05e579b9577686e9f510338b197fe392483f3d2eb50398d3097573cb	TinyLoader payload (confidence level: 95%)
hash2a6ff4571b915d61b60ecc2922d342f07bdfb71d	TinyLoader payload (confidence level: 95%)
hashd13cad682fd5abb767313f79c1732822	TinyLoader payload (confidence level: 95%)
hashc2a383a0dff5e69299443a119bb73f2b76f3f9c0f3951330ffea5db26fc3797f	DarkTortilla payload (confidence level: 95%)
hash60b2674a3acda83abedd7173355a9473f2904f17	DarkTortilla payload (confidence level: 95%)
hash624eb52464199c7dfea8f082c5b4e9f7	DarkTortilla payload (confidence level: 95%)
hash9a04ce5c1ed6e353d8d8d936fefba4517ecc8f6777e5f866178dba084ae90d8a	Agent Tesla payload (confidence level: 95%)
hashcf5058b0d233abf4abf55bd13597f9b07c5d2eed	Agent Tesla payload (confidence level: 95%)
hash18b93f31c49e4302e3fd26764b6ad37a	Agent Tesla payload (confidence level: 95%)

Url

Value	Description	Copy
urlhttps://ghukonhgf.com/api/	Unknown malware botnet C2 (confidence level: 75%)
urlhttps://github.com/hothehottest/recaptcha-2/releases/download/recaptcha-2/boost.zip	Unknown malware payload delivery URL (confidence level: 75%)
urlhttps://bw-development.app/antibot2	Unknown malware payload delivery URL (confidence level: 75%)
urlhttp://5.83.134.26/ssh	Unknown malware payload delivery URL (confidence level: 75%)
urlhttp://151.243.18.28/4940cc4b5ddb4a2bb8f8.php	Stealc botnet C2 (confidence level: 100%)
urlhttps://sup.gasturbo88.top/	Vidar botnet C2 (confidence level: 75%)
urlhttp://154.198.50.76:8080/upload	Unknown malware botnet C2 (confidence level: 100%)
urlhttps://thisismine.asia/	Unknown malware payload delivery URL (confidence level: 90%)
urlhttps://testerha.com/	Unknown malware payload delivery URL (confidence level: 90%)
urlhttps://ffe.gasturbo88.top/	Vidar botnet C2 (confidence level: 100%)
urlhttps://ffe.glamisdunesrentals.com/	Vidar botnet C2 (confidence level: 100%)
urlhttps://verif-code.lol/o	KongTuke payload delivery URL (confidence level: 100%)
urlhttps://alabastermarket.top/role/health-json	SmartApeSG payload delivery URL (confidence level: 100%)
urlhttps://alabastermarket.top/role/redirect-html.js	SmartApeSG payload delivery URL (confidence level: 100%)
urlhttps://saffronarchivehub.top/role/policy-sessionstore.js	SmartApeSG payload delivery URL (confidence level: 100%)
urlhttps://saffronarchivehub.top/role/health-json	SmartApeSG payload delivery URL (confidence level: 100%)
urlhttps://saffronarchivehub.top/role/redirect-html.js	SmartApeSG payload delivery URL (confidence level: 100%)
urlhttp://spasopro.at/index.php	SmokeLoader botnet C2 (confidence level: 75%)
urlhttps://spasopro.at/index.php	SmokeLoader botnet C2 (confidence level: 75%)
urlhttp://104.234.18.91:3001/ws	Unknown malware botnet C2 (confidence level: 100%)
urlhttp://104.234.18.91:3001/api/internal/log	Unknown malware botnet C2 (confidence level: 100%)
urlhttp://104.234.18.91:3001/api/upload	Unknown malware botnet C2 (confidence level: 100%)
urlhttps://ox3.glamisdunesrentals.com/	Vidar botnet C2 (confidence level: 100%)
urlhttps://ox3.gasturbo88.top/	Vidar botnet C2 (confidence level: 75%)
urlhttps://srv.gasturbo88.top/	Vidar botnet C2 (confidence level: 100%)
urlhttps://srv.glamisdunesrentals.com/	Vidar botnet C2 (confidence level: 100%)

Domain

Value	Description	Copy
domainghukonhgf.com	Unknown malware botnet C2 domain (confidence level: 75%)
domain8h9b5pgo.garatequran.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainsdlclrs.akhlageslami.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainaolbzrji.red90.casino	ClearFake payload delivery domain (confidence level: 100%)
domainmvwrgylee.danestanihavarzeshi.com	ClearFake payload delivery domain (confidence level: 100%)
domainblueprintmesh.com	AMOS payload delivery domain (confidence level: 100%)
domaindstwl.com	AMOS payload delivery domain (confidence level: 100%)
domainewnwfae.hesabdaripishrafte.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainlwywtkki.winxbet.co	ClearFake payload delivery domain (confidence level: 100%)
domainverccbf.hesabdarinoravesh.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainkpeahfhd.rial.bet	ClearFake payload delivery domain (confidence level: 100%)
domainm2bu2yf9.ansuyemarg.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainzo4t1q36.moarefeslami.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainiznukhb.hesabdari2.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainmocauhxe.mabanishimi.xyz	ClearFake payload delivery domain (confidence level: 100%)
domain1cihg2b5.anodaz.vip	ClearFake payload delivery domain (confidence level: 100%)
domainrjwfiwgjr.defamogadas.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainsup.gasturbo88.top	Vidar botnet C2 domain (confidence level: 75%)
domaindmwncnnnp.defamogadas.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainifvtbgbf.maharatmodiran.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainqlvwxer.karafarini.shop	ClearFake payload delivery domain (confidence level: 100%)
domainkuonnjkj.masirpayambari.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainslojemw.leaguejazire.com	ClearFake payload delivery domain (confidence level: 100%)
domain1v6le0j1.andisheeslami2.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainhzvvlqps.mechanicsayalat.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainjuakvinjpo34.xyz	Unknown Loader payload delivery domain (confidence level: 100%)
domain4piqgfum.garatequran.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainaetherframework.digital	ClearFake payload delivery domain (confidence level: 100%)
domainldmmsp6b.angizeshfarahani.store	ClearFake payload delivery domain (confidence level: 100%)
domainxnvdto36.ganuneasasi.xyz	ClearFake payload delivery domain (confidence level: 100%)
domaincxwqtlc8.asibshenasiyahya.shop	ClearFake payload delivery domain (confidence level: 100%)
domainrn0mptxh.anodaz.tv	ClearFake payload delivery domain (confidence level: 100%)
domain181xlt4g.gavaedfagahe.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainjqfg2zyi.ehtemalatvaamar.xyz	ClearFake payload delivery domain (confidence level: 100%)
domain8t4ow8gc.azmoonhayeravani.shop	ClearFake payload delivery domain (confidence level: 100%)
domain988920lt-ublib.988920a1.buzz	ClearFake payload delivery domain (confidence level: 100%)
domaingng97m36.angizeshfarahani.store	ClearFake payload delivery domain (confidence level: 100%)
domainomeade.2k3phuchau.christmas	ClearFake payload delivery domain (confidence level: 100%)
domainallfood.2k3phuchau.christmas	ClearFake payload delivery domain (confidence level: 100%)
domainnjjinvestments.2k3phuchau.christmas	ClearFake payload delivery domain (confidence level: 100%)
domaincqshazxp.neural-atlas.digital	ClearFake payload delivery domain (confidence level: 100%)
domains8a20vxh.gavaedfagahe.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainyvlenqci.rial.bet	ClearFake payload delivery domain (confidence level: 100%)
domainkwoptitn.restaurantguideaarhus.com	ClearFake payload delivery domain (confidence level: 100%)
domainthisismine.asia	Unknown malware payload delivery domain (confidence level: 100%)
domainqnjutqs.bet303.app	ClearFake payload delivery domain (confidence level: 100%)
domaingwofphogw.differentialmamuli.store	ClearFake payload delivery domain (confidence level: 100%)
domainp5k42qtw.anodaz.co	ClearFake payload delivery domain (confidence level: 100%)
domainclabrmercur.pages.dev	ClearFake payload delivery domain (confidence level: 100%)
domainclabrmercur.pages.dev	ClearFake payload delivery domain (confidence level: 100%)
domainclavgood.pages.dev	ClearFake payload delivery domain (confidence level: 100%)
domainclavgood.pages.dev	ClearFake payload delivery domain (confidence level: 100%)
domainstorgvkam.pages.dev	ClearFake payload delivery domain (confidence level: 100%)
domainstorgvkam.pages.dev	ClearFake payload delivery domain (confidence level: 100%)
domainstorgvkam.pages.dev	ClearFake payload delivery domain (confidence level: 100%)
domainclaude-code-product.squarespace.com	ClearFake payload delivery domain (confidence level: 100%)
domainclaude-code-product.squarespace.com	ClearFake payload delivery domain (confidence level: 100%)
domainnotebooklm-update-version.squarespace.com	ClearFake payload delivery domain (confidence level: 100%)
domainnotebooklm-update-version.squarespace.com	ClearFake payload delivery domain (confidence level: 100%)
domainnotebooklm-update-version.squarespace.com	ClearFake payload delivery domain (confidence level: 100%)
domainnotebooklm-update-version.squarespace.com	ClearFake payload delivery domain (confidence level: 100%)
domaingimomouf.red90.casino	ClearFake payload delivery domain (confidence level: 100%)
domainshell.botnet.st	Mirai botnet C2 domain (confidence level: 100%)
domainreal.botnet.st	Mirai botnet C2 domain (confidence level: 100%)
domain2chci0sm.andisheeslami2.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainzyuhgbux.hugugtejarat4.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainieemaju.akhlageslami.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainbtbwehpkp.drivingbook.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainffe.gasturbo88.top	Vidar botnet C2 domain (confidence level: 100%)
domainffe.glamisdunesrentals.com	Vidar botnet C2 domain (confidence level: 100%)
domainverif-code.lol	KongTuke payload delivery domain (confidence level: 100%)
domainghdre2hy.geotechnictahuni.store	ClearFake payload delivery domain (confidence level: 100%)
domain02y48l3v.asibshenasiyahya.shop	ClearFake payload delivery domain (confidence level: 100%)
domainnamrqlix.hugugnasiri.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainalabastermarket.top	SmartApeSG payload delivery domain (confidence level: 100%)
domainmymrtijp.hugugmadani6.xyz	ClearFake payload delivery domain (confidence level: 100%)
domaindl.erickillorinphotostore.com	FAKEUPDATES botnet C2 domain (confidence level: 100%)
domainsaffronarchivehub.top	SmartApeSG payload delivery domain (confidence level: 100%)
domainwww.sharingfile.cloud	Unknown malware botnet C2 domain (confidence level: 50%)
domainlinkednewsapi.top	Unknown malware botnet C2 domain (confidence level: 50%)
domainogonna.ydns.eu	XWorm botnet C2 domain (confidence level: 75%)
domainhqvgwxfu.hugugedari.xyz	ClearFake payload delivery domain (confidence level: 100%)
domaincmkfhtt.bet303.promo	ClearFake payload delivery domain (confidence level: 100%)
domainjksidxrvz.bookdrive.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainmlcos.cdnupdate.net	Cobalt Strike botnet C2 domain (confidence level: 75%)
domainstarayadaet.com	Unknown malware botnet C2 domain (confidence level: 75%)
domainmarblecologrgr.com	Unknown malware payload delivery domain (confidence level: 75%)
domainox3.glamisdunesrentals.com	Vidar botnet C2 domain (confidence level: 100%)
domainox3.gasturbo88.top	Vidar botnet C2 domain (confidence level: 75%)
domainnibfzvsq.hugugbime.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainrlpxurgo.qurandownload.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainznrax5pn.qurandownload.xyz	ClearFake payload delivery domain (confidence level: 100%)
domain98jhjysx.ehtemalatvaamar.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainffynigbdr.barnamenevisi.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainhlgwrpbh.mechanicsayalat.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainnkxkhfp.bet303.app	ClearFake payload delivery domain (confidence level: 100%)
domainf7a20n5o.ravansalamat.shop	ClearFake payload delivery domain (confidence level: 100%)
domainljj8nzo0.ravansalamat.shop	ClearFake payload delivery domain (confidence level: 100%)
domain933anmoo.azmoonhayeravani.shop	ClearFake payload delivery domain (confidence level: 100%)
domainkaiojocv.masirpayambari.xyz	ClearFake payload delivery domain (confidence level: 100%)
domain1364170351-9enmkvd46p.ap-guangzhou.tencentscf.com	Cobalt Strike botnet C2 domain (confidence level: 75%)
domaint92hw5pi.nazariyeyadgiri.xyz	ClearFake payload delivery domain (confidence level: 100%)
domaineeqagxew.maharatmodiran.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainowedcphc.ravanshenakhti.shop	ClearFake payload delivery domain (confidence level: 100%)
domainsrv.gasturbo88.top	Vidar botnet C2 domain (confidence level: 100%)
domainsrv.glamisdunesrentals.com	Vidar botnet C2 domain (confidence level: 100%)
domaino0irv3h9.ravabetensani.site	ClearFake payload delivery domain (confidence level: 100%)
domainbfksnnrp.prozhecart.com	ClearFake payload delivery domain (confidence level: 100%)
domainjdxqaihsh.bankefiile.com	ClearFake payload delivery domain (confidence level: 100%)
domainzjtjokj.quranmohagegin.shop	ClearFake payload delivery domain (confidence level: 100%)
domainqlwxqybo.prozhedownload.com	ClearFake payload delivery domain (confidence level: 100%)
domain2sci40h1.ravanshenasiganji.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainpipx8iw2.ravanshenasiganji.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainmsp.shoptopexpress.com	StrelaStealer payload delivery domain (confidence level: 100%)
domainravandarmani.xyz	ClearFake payload delivery domain (confidence level: 100%)
domainfdktfbbn.jam-jahani.com	ClearFake payload delivery domain (confidence level: 100%)
domainqeyshvibv.azmoonzare.online	ClearFake payload delivery domain (confidence level: 100%)

Threat ID: 6a2b4f7e815e7002b8480767

Added to database: 6/12/2026, 12:14:54 AM

Last enriched: 6/12/2026, 12:14:59 AM

Last updated: 6/12/2026, 5:01:11 AM

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by

Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

External Links

Search on Google

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited

View courses

ThreatFox IOCs for 2026-06-11

AI Analysis

Technical Summary

Potential Impact

Mitigation Recommendations

Indicators of Compromise

ThreatFox IOCs for 2026-06-11

Description

AI-Powered Analysis

Technical Analysis

Potential Impact

Mitigation Recommendations

Technical Details

Indicators of Compromise

File

Hash

Url

Domain

Community Reviews

Actions

External Links

Need more coverage?

Latest Threats

Check if your credentials are on the dark web

Lead Pen Test Professional

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility

ThreatFox IOCs for 2026-06-11

AI Analysis

Technical Summary

Potential Impact

Mitigation Recommendations

Indicators of Compromise

ThreatFox IOCs for 2026-06-11

Description

AI-Powered Analysis

Technical Analysis

Potential Impact

Mitigation Recommendations

Technical Details

Indicators of Compromise

File

Hash

Url

Domain

Community Reviews

Related Threats

Targeted espionage against Cambodian government entities

Maltrail IOC for 2026-06-11

OnyxC2 Stealer Offers Cybercriminals Enterprise-Grade Theft for $250 a Month

Siemens Says Desigo CC Files Flagged as Malware by Security Engines

Fake Software Tutorials on TikTok Spread Vidar Stealer

Actions

External Links

Need more coverage?

Latest Threats

Check if your credentials are on the dark web

Lead Pen Test Professional

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility