Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-14

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 207

  • s01687.byte-buff.comUnknown malware botnet C2 domain (confidence level: 100%)
  • s01687.house-spirit.comUnknown malware botnet C2 domain (confidence level: 100%)
  • s01687.novel-layer.comUnknown malware botnet C2 domain (confidence level: 100%)
  • s01687.star-layer.comUnknown malware botnet C2 domain (confidence level: 100%)
  • s01688.byte-buff.comUnknown malware botnet C2 domain (confidence level: 100%)
  • s01688.house-spirit.comUnknown malware botnet C2 domain (confidence level: 100%)
  • s01688.novel-layer.comUnknown malware botnet C2 domain (confidence level: 100%)
  • s01688.star-layer.comUnknown malware botnet C2 domain (confidence level: 100%)
  • s01689.byte-buff.comUnknown malware botnet C2 domain (confidence level: 100%)
  • s01689.house-spirit.comUnknown malware botnet C2 domain (confidence level: 100%)

URLs 15

  • https://whatdatcindy.com/nfront.phpSatacom botnet C2 (confidence level: 100%)
  • https://sindppence.org.br/Unknown malware payload delivery URL (confidence level: 90%)
  • https://mampodik.asia/Unknown malware payload delivery URL (confidence level: 90%)
  • https://217.60.195.113/shRedTail payload delivery URL (confidence level: 85%)
  • http://151.240.151.64/9966f4d17e8f4875aad6.phpStealc botnet C2 (confidence level: 75%)
  • http://nottinghamcarpetsandblinds.com:5789Remus botnet C2 (confidence level: 75%)
  • http://sekirolegion.duckdns.org/api/endpoint.phpUnknown Stealer botnet C2 (confidence level: 100%)
  • http://ptlegion.duckdns.org/api/endpoint.phpUnknown Stealer botnet C2 (confidence level: 100%)
  • http://silentlegion.duckdns.org/gate/update.phpUnknown Stealer botnet C2 (confidence level: 100%)
  • http://silentlegion.duckdns.org/gate/config.phpUnknown Stealer botnet C2 (confidence level: 100%)

IP addresses 223

  • 5.39.216.137Mirai payload delivery server (confidence level: 100%)
  • 5.39.216.137Mirai payload delivery server (confidence level: 100%)
  • 5.175.215.102Mirai payload delivery server (confidence level: 100%)
  • 5.189.129.198Mirai payload delivery server (confidence level: 100%)
  • 31.56.209.8Mirai payload delivery server (confidence level: 100%)
  • 37.16.74.24Mirai payload delivery server (confidence level: 100%)
  • 37.16.74.24Mirai payload delivery server (confidence level: 100%)
  • 37.49.224.15Mirai payload delivery server (confidence level: 100%)
  • 37.49.224.15Mirai payload delivery server (confidence level: 100%)
  • 37.49.229.42Mirai payload delivery server (confidence level: 100%)

Hashes 89

  • 53bcc0b768812ba2860d64b72353c50430572a866bd658b3fe5e671e15b7e699WannaCryptor payload (confidence level: 95%)
  • b795d6a60abf51b1ddb8c40706a6ffaf72ab763bWannaCryptor payload (confidence level: 95%)
  • 6204e3e8f5075a2b598f4460ff069126WannaCryptor payload (confidence level: 95%)
  • ffb42d868ef70aafbf8a08178d59c068fc0b13995e8d7185df869b49374dc653Coinminer payload (confidence level: 95%)
  • d953d4e234e8b3f0ba659d355011078fa1d8e6e3Coinminer payload (confidence level: 95%)
  • b036154d6a043b690421ac0a812be7fdCoinminer payload (confidence level: 95%)
  • 99dee89a3427e03b136a462f486cf3537f98f4fc82c16dd9119080edf3eb4d2cCoinminer payload (confidence level: 95%)
  • 940844c040b79a2a3b85f5762d5f39ac593ba1d7Coinminer payload (confidence level: 95%)
  • 26799ecfcf4fe9850a1c224aa39c96beCoinminer payload (confidence level: 95%)
  • d6e6cb2c61d3f22b05b49a864283c277f5c852565ec07e70c5f408053d1200eepurpleink payload (confidence level: 95%)

Description

ThreatFox IOCs for 2026-06-14

Community reviews

Loading reviews…