Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-17

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 353

  • granitequill.topSmartApeSG payload delivery domain (confidence level: 100%)
  • 2rbo.com.mxUnknown Stealer payload delivery domain (confidence level: 100%)
  • instantpublicalertnetwork.comUnknown malware payload delivery domain (confidence level: 75%)
  • abelmomaroc.comUnknown Stealer payload delivery domain (confidence level: 100%)
  • abilitaseguros.com.brUnknown Stealer payload delivery domain (confidence level: 100%)
  • ac4hosting.comUnknown Stealer payload delivery domain (confidence level: 100%)
  • activationlbanmastercredit.infoUnknown Stealer payload delivery domain (confidence level: 100%)
  • activeiman.comUnknown Stealer payload delivery domain (confidence level: 100%)
  • afroskin.idUnknown Stealer payload delivery domain (confidence level: 100%)
  • chiltonlabs.orgUnknown Stealer payload delivery domain (confidence level: 100%)

URLs 104

  • https://granitequill.top/token/permission-css.jsSmartApeSG payload delivery URL (confidence level: 100%)
  • https://granitequill.top/token/scope-requestSmartApeSG payload delivery URL (confidence level: 100%)
  • https://granitequill.top/token/signin-schema.jsSmartApeSG payload delivery URL (confidence level: 100%)
  • https://afroskin.id/Unknown malware payload delivery URL (confidence level: 90%)
  • https://abilitaseguros.com.br/Unknown malware payload delivery URL (confidence level: 90%)
  • https://abelmomaroc.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://activeiman.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://2rbo.com.mx/Unknown malware payload delivery URL (confidence level: 90%)
  • https://drive.google.com/file/d/15gqa1eu6jzb4sggkwe7wdu3lubzv-y0_/view?usp=sharingUnknown malware payload delivery URL (confidence level: 75%)
  • https://drive.google.com/file/d/1qn5mhqce364sdyettwzbngyiein4iyof/view?usp=sharingUnknown malware payload delivery URL (confidence level: 75%)

IP addresses 95

  • 45.59.163.198BeaverTail botnet C2 server (confidence level: 100%)
  • 103.230.15.159Cobalt Strike botnet C2 server (confidence level: 100%)
  • 103.230.15.159Cobalt Strike botnet C2 server (confidence level: 100%)
  • 107.173.47.132Remcos botnet C2 server (confidence level: 75%)
  • 141.94.121.162DCRat botnet C2 server (confidence level: 75%)
  • 141.140.0.116Unknown RAT botnet C2 server (confidence level: 75%)
  • 141.140.0.188Unknown malware botnet C2 server (confidence level: 75%)
  • 141.140.0.215Unknown RAT botnet C2 server (confidence level: 75%)
  • 223.166.31.185Cobalt Strike botnet C2 server (confidence level: 100%)
  • 32.196.118.34Cobalt Strike botnet C2 server (confidence level: 100%)

Hashes 67

  • 9e4235c530fc10df9225e9ab98095d7a19d35f9e4ebf50a74dcb4b1e7bf86170Unknown malware payload (confidence level: 75%)
  • 725162f784b4438559ad5c434a0cb6f634a2a09f2aba1e4d5e5047f6e37f15a0Unknown malware payload (confidence level: 75%)
  • 96d69776c9a303e03f6539c3b1c1f3dbUnknown RAT payload (confidence level: 75%)
  • 0db2674d46ce0843b2881ee27f9c93e358f205facdf834ac794d594920cee0dfUnknown RAT payload (confidence level: 75%)
  • 997a09b5cbbebd7e07fad4185d82ca28e8d259ffb93519f563313535e268ddf6NetWire RC payload (confidence level: 95%)
  • f5987ecdb335f84401f199f287aecca48763ce3cNetWire RC payload (confidence level: 95%)
  • 8f7f395cb7def20a202a092772e89a5fNetWire RC payload (confidence level: 95%)
  • 75b337e70eed4a266c7a925c1e484c86ee9f09c56bb7bb9a4e0ebc386f3f4a15NetWire RC payload (confidence level: 95%)
  • bcbc2475f08319df62c3d8539f2b65d00401d61aNetWire RC payload (confidence level: 95%)
  • ca0b75619126f690492350972c59baebNetWire RC payload (confidence level: 95%)

Description

ThreatFox IOCs for 2026-06-17

Community reviews

Loading reviews…