Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-16

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 111

  • speed-optimizer.comFAKEUPDATES payload delivery domain (confidence level: 100%)
  • cunozylb.sanjeshvaandazegiri.shopClearFake payload delivery domain (confidence level: 100%)
  • sip.hanyasm188.topVidar botnet C2 domain (confidence level: 75%)
  • sip.rzrrent.comVidar botnet C2 domain (confidence level: 75%)
  • tmajnhws.sazebetonarme.xyzClearFake payload delivery domain (confidence level: 100%)
  • khfujqd.shartbandifootballkade.onlineClearFake payload delivery domain (confidence level: 100%)
  • vb6axq3r.testdrivepaye3.comClearFake payload delivery domain (confidence level: 100%)
  • ez92gghl.ravanshenasinovin.xyzClearFake payload delivery domain (confidence level: 100%)
  • hibwmmbn.shartbandi.gamesClearFake payload delivery domain (confidence level: 100%)
  • shfbucmg.tarikhravannovin.shopClearFake payload delivery domain (confidence level: 100%)

URLs 24

  • https://speed-optimizer.com/scripts/core.min.jsFAKEUPDATES payload delivery URL (confidence level: 100%)
  • https://smenapodik.bond/Unknown malware payload delivery URL (confidence level: 90%)
  • https://sip.hanyasm188.top/Vidar botnet C2 (confidence level: 75%)
  • https://sip.rzrrent.com/Vidar botnet C2 (confidence level: 75%)
  • http://66.94.119.99/lsge63sd3/index.phpAmadey botnet C2 (confidence level: 100%)
  • https://plunkev.ca/Unknown malware payload delivery URL (confidence level: 90%)
  • https://coquinalawgroup.com/Vidar payload delivery URL (confidence level: 75%)
  • https://135.181.77.214/Vidar botnet C2 (confidence level: 100%)
  • https://178.105.230.82/Vidar botnet C2 (confidence level: 100%)
  • https://65.21.96.130/Vidar botnet C2 (confidence level: 100%)

IP addresses 131

  • 64.225.65.127Kimwolf botnet C2 server (confidence level: 100%)
  • 167.99.47.245Kimwolf botnet C2 server (confidence level: 100%)
  • 45.151.101.97Cobalt Strike botnet C2 server (confidence level: 75%)
  • 131.143.251.246AdaptixC2 botnet C2 server (confidence level: 100%)
  • 131.143.251.246AdaptixC2 botnet C2 server (confidence level: 100%)
  • 131.143.251.246AdaptixC2 botnet C2 server (confidence level: 100%)
  • 118.107.5.209AdaptixC2 botnet C2 server (confidence level: 100%)
  • 118.107.5.209AdaptixC2 botnet C2 server (confidence level: 100%)
  • 118.107.5.209AdaptixC2 botnet C2 server (confidence level: 100%)
  • 3.111.43.20VShell botnet C2 server (confidence level: 100%)

Hashes 176

  • b4f2276d77aab7af850e2994faf1f44524a4356ed3ffea0e1ddd4e56dfb274c7DarkTortilla payload (confidence level: 95%)
  • 3f77b99063dff07b1310a98df2c6ffb1ffd0e171DarkTortilla payload (confidence level: 95%)
  • 345a1ab350f2c7ddabf686e27e784941DarkTortilla payload (confidence level: 95%)
  • d313447f8bc9b4e058ca7b3de4cb73f03be0713a730b73cc03a9faecbeb288bcCreal Stealer payload (confidence level: 95%)
  • 89645be5e141a5cb33788b798085a7e649014952Creal Stealer payload (confidence level: 95%)
  • dcad6b0d28491d35d79b9f28728ae9e3Creal Stealer payload (confidence level: 95%)
  • e38a83583a9e712d2163224485ecd934e9b27a6850bbe3c022d6344d0298a188SalatStealer payload (confidence level: 95%)
  • 36fac57421cd3e344ae6f03685df703c83cf592aSalatStealer payload (confidence level: 95%)
  • 5bf6e385651d48acf554428e8301ef5bSalatStealer payload (confidence level: 95%)
  • 0da7be1647f31711fd16932c46c9897f5d5d321746d4e8ff0f5184c59d08cbe4DeerStealer payload (confidence level: 95%)

Description

ThreatFox IOCs for 2026-06-16

Community reviews

Loading reviews…