Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-19

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 60

  • imodobeness.atNgioweb botnet C2 domain (confidence level: 100%)
  • iruledolical.orgNgioweb botnet C2 domain (confidence level: 100%)
  • unibokosion.ccNgioweb botnet C2 domain (confidence level: 100%)
  • backoffice.ptbaconsulting.comFAKEUPDATES botnet C2 domain (confidence level: 100%)
  • w5kaz0nm.ahkam.xyzClearFake payload delivery domain (confidence level: 100%)
  • rasmfani.xyzClearFake payload delivery domain (confidence level: 100%)
  • x69rs3qk.rasmfani.xyzClearFake payload delivery domain (confidence level: 100%)
  • aulvud5j.dancebetyek.appClearFake payload delivery domain (confidence level: 100%)
  • l6tafmqurswrpajwgnvpnpnpd77xavfm4n52xqfsjfltnersjv2fxoqd.onionLockBit botnet C2 domain (confidence level: 100%)
  • kff3b66znolwznie6cinz2pecxrrxpeptwuzeudaed63viv4fbnketyd.onionLockBit botnet C2 domain (confidence level: 100%)

URLs 93

  • https://delmore-effect.com/Unknown malware payload delivery URL (confidence level: 90%)
  • http://103.176.16.93:47938/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://223.123.77.15:48168/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://113.99.201.216:40944/mozi.aMozi payload delivery URL (confidence level: 75%)
  • http://186.4.217.208:43140/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://42.230.218.169:36211/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://72.255.3.97:44709/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://223.123.43.68:54638/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://103.146.111.93:37443/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://139.135.59.145:34945/mozi.aMozi payload delivery URL (confidence level: 75%)

IP addresses 105

  • 193.187.101.68Cobalt Strike botnet C2 server (confidence level: 100%)
  • 34.27.195.76Ngioweb botnet C2 server (confidence level: 100%)
  • 165.227.123.79IClickFix botnet C2 server (confidence level: 75%)
  • 78.40.194.67Unknown RAT botnet C2 server (confidence level: 100%)
  • 191.44.109.233Unknown malware botnet C2 server (confidence level: 75%)
  • 154.205.154.82Coreshell botnet C2 server (confidence level: 75%)
  • 207.148.121.95Coreshell botnet C2 server (confidence level: 75%)
  • 207.148.120.52Coreshell botnet C2 server (confidence level: 75%)
  • 212.11.64.105Coreshell botnet C2 server (confidence level: 75%)
  • 216.238.118.179Coreshell botnet C2 server (confidence level: 75%)

Hashes 18

  • 24adb118a6f7a8d717bb3d3329c33f6b0eb39046a8fb7f2b3a1fff21436bf7d2Unknown malware payload (confidence level: 75%)
  • f5952a6947e65dc0165e27ec100eaee09aa65790ca34c517c28d6d9ea4afb319Unknown malware payload (confidence level: 75%)
  • b7d6869b427a2e714744c73ade17f1b47fae43bb2ee1a6d7ee9f4c93943406d2Unknown malware payload (confidence level: 75%)
  • a9773c53a9611c737dc6a08622b3240e38430ceb0a3960f81391606cd1f02a86Unknown malware payload (confidence level: 75%)
  • 6844800e8a8defda07b2829c02e76517ca98fedcbbf717328517bef28b279724Unknown malware payload (confidence level: 75%)
  • bb4e08d8d96ace12a659a07d0ede31546e121176321b1d0f8cd15fe0f62127c0Unknown malware payload (confidence level: 75%)
  • 711d9427ee43bc2186b9124f31cba2db5f54ec9a0d56dc2948e1a4377bada289CrossLock payload (confidence level: 100%)
  • 3c098a687947938e36ab34b9f09a11ebd82d50089cbfe6e237d810faa729f8ffCrossLock payload (confidence level: 100%)
  • f36913607356a32ea106103387105c635fa923f8ed98ad0194b66ec79e379a02CrossLock payload (confidence level: 100%)
  • a5e413456ce9fc60bb44d442b72546e9e4118a61894fbe4b5c56e4dfad6055e3CrossLock payload (confidence level: 100%)

Description

ThreatFox IOCs for 2026-06-19

Community reviews

Loading reviews…