Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-15

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 131

  • tcp.tcptunnel.shopUnknown RAT botnet C2 domain (confidence level: 100%)
  • l9oi6rwb.bordestan.comClearFake payload delivery domain (confidence level: 100%)
  • cwpjgrng.hugugtatbigi.xyzClearFake payload delivery domain (confidence level: 100%)
  • twmpoxnh.hugugtejarat4.xyzClearFake payload delivery domain (confidence level: 100%)
  • obuultev.casinokade.onlineClearFake payload delivery domain (confidence level: 100%)
  • q6ewl5b2.casinokade.onlineClearFake payload delivery domain (confidence level: 100%)
  • bgfwrtgo.jam-jahani.comClearFake payload delivery domain (confidence level: 100%)
  • qelljcx.megaparikade.comClearFake payload delivery domain (confidence level: 100%)
  • sdppicy4.shansline.comClearFake payload delivery domain (confidence level: 100%)
  • lhpahogn.karafarini.shopClearFake payload delivery domain (confidence level: 100%)

URLs 43

  • https://infobhz.com.br/Unknown malware payload delivery URL (confidence level: 90%)
  • https://steamcommunity.com/profiles/76561198689449626Vidar botnet C2 (confidence level: 100%)
  • https://telegram.me/turb00mVidar botnet C2 (confidence level: 100%)
  • https://snd.goturbo88.top/Vidar botnet C2 (confidence level: 100%)
  • https://ikg.goturbo88.top/Vidar botnet C2 (confidence level: 100%)
  • https://ggt.goturbo88.top/Vidar botnet C2 (confidence level: 100%)
  • https://snd.glamisrents.com/Vidar botnet C2 (confidence level: 100%)
  • https://ikg.glamisrents.com/Vidar botnet C2 (confidence level: 100%)
  • https://ggt.glamisrents.com/Vidar botnet C2 (confidence level: 100%)
  • https://65.21.96.133/Vidar botnet C2 (confidence level: 100%)

IP addresses 137

  • 173.44.139.144SPICA botnet C2 server (confidence level: 75%)
  • 45.133.216.15SPICA botnet C2 server (confidence level: 75%)
  • 95.164.17.94SPICA botnet C2 server (confidence level: 75%)
  • 89.19.211.240SPICA botnet C2 server (confidence level: 75%)
  • 185.188.155.179Cobalt Strike botnet C2 server (confidence level: 93%)
  • 65.21.96.133Vidar botnet C2 server (confidence level: 100%)
  • 46.224.136.4Vidar botnet C2 server (confidence level: 100%)
  • 128.140.123.80Vidar botnet C2 server (confidence level: 100%)
  • 5.161.119.247Vidar botnet C2 server (confidence level: 100%)
  • 46.225.162.206Vidar botnet C2 server (confidence level: 100%)

Hashes 4

  • 681c3b22d00252e557c458a84f4fdbf37e23ce34db9ba4bd419d17ba6c5ce937Unknown malware payload (confidence level: 75%)
  • da8d89a25d0edc6186a9e70bca59e37a25b1f4ab84966ed1e4b9aa35d2c20601Unknown malware payload (confidence level: 100%)
  • a92d28f1d32e3a9ab7c3691f8bfca8f7586bb0666adbba47eab3e1a8faf7ecc0Unknown malware payload (confidence level: 100%)
  • c0d896e94c4dd8b64f400d16ec3cb59f3c51fc940d06241a028d0204d0407a94AsyncRAT payload (confidence level: 100%)

Description

ThreatFox IOCs for 2026-06-15

Community reviews

Loading reviews…