Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-20

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 31

  • coralregistry.topSmartApeSG payload delivery domain (confidence level: 100%)
  • dgdf.nimographic.comUnknown malware payload delivery domain (confidence level: 75%)
  • api-ext.bixbitemarketing.comFAKEUPDATES payload delivery domain (confidence level: 100%)
  • coldtechreview.vipXMRIG botnet C2 domain (confidence level: 100%)
  • node54group.comNetSupportManager RAT botnet C2 domain (confidence level: 100%)
  • node66group.proNetSupportManager RAT botnet C2 domain (confidence level: 100%)
  • google2oauth.comNetSupportManager RAT payload delivery domain (confidence level: 100%)
  • elijahwgummer.babyUnknown malware botnet C2 domain (confidence level: 75%)
  • e57ra5jx.plinkobet.casinoClearFake payload delivery domain (confidence level: 100%)
  • 0odlgi4q.motuntakhasosi.storeClearFake payload delivery domain (confidence level: 100%)

URLs 24

  • https://coralregistry.top/middleware/role-render.jsSmartApeSG payload delivery URL (confidence level: 100%)
  • https://coralregistry.top/middleware/version-schemaSmartApeSG payload delivery URL (confidence level: 100%)
  • https://coralregistry.top/middleware/endpoint-asset.jsSmartApeSG payload delivery URL (confidence level: 100%)
  • http://google2oauth.com/google.txtNetSupportManager RAT payload delivery URL (confidence level: 100%)
  • https://imgur.media/Unknown malware payload delivery URL (confidence level: 90%)
  • https://elijahwgummer.baby/monkey-e669fb0-a99aeeab-5e65331880-0b06979Unknown malware botnet C2 (confidence level: 75%)
  • http://www.kongographics.com/200Unknown malware payload delivery URL (confidence level: 75%)
  • http://cdn.librarygrades.com/200.txtUnknown malware payload delivery URL (confidence level: 75%)
  • https://vigipart.fr/Unknown malware payload delivery URL (confidence level: 90%)
  • https://ivorycourtyard.top/middleware/role-render.jsSmartApeSG payload delivery URL (confidence level: 100%)

IP addresses 86

  • 212.127.90.201RedTail payload delivery server (confidence level: 80%)
  • 147.139.136.75RedTail payload delivery server (confidence level: 80%)
  • 31.132.90.3RedTail payload delivery server (confidence level: 80%)
  • 115.248.8.65RedTail payload delivery server (confidence level: 80%)
  • 167.233.68.137RedTail payload delivery server (confidence level: 80%)
  • 5.40.229.236XMRIG payload delivery server (confidence level: 80%)
  • 39.34.134.209XMRIG payload delivery server (confidence level: 80%)
  • 103.217.176.73XMRIG payload delivery server (confidence level: 80%)
  • 213.209.159.66XMRIG payload delivery server (confidence level: 80%)
  • 64.89.163.82XMRIG payload delivery server (confidence level: 80%)

Hashes 177

  • c343f53916747c5b8a60aed844b1882863f432af65867297edf1913f167c4f68Unknown malware payload (confidence level: 75%)
  • e8ee3e3e25e9deef039131b7e66855a2e614d36f395b582f9b7e6365ffd61484Unknown malware payload (confidence level: 75%)
  • 13420d64ce091f6dc0505d5a2ca5858f6080f3d91580459c2284bd68fdcb1979Unknown malware payload (confidence level: 75%)
  • aa40a70d1dbf91af1d2bfc5209417fadb3b4ad2192a4ea4cbf802e2b10d5b0ceWannaCryptor payload (confidence level: 95%)
  • 791618590c32a2164037f241b401f4698e37c239WannaCryptor payload (confidence level: 95%)
  • 6640820a921a5235ffa3448c7640039cWannaCryptor payload (confidence level: 95%)
  • 8d347ecef1e388d150a55d84f0397dc39be24d22c456681eb57ca23580f4083fWannaCryptor payload (confidence level: 95%)
  • d7784fdaca930daf2e664a388ce2c9fed3ca7ca4WannaCryptor payload (confidence level: 95%)
  • 9d9e293be0bc3323060ff6271cc00d4fWannaCryptor payload (confidence level: 95%)
  • 798138899fae930a2eb5d70aafd8ba622fd1674fec571e282e9c9589b39cffefNanocore RAT payload (confidence level: 95%)

Description

ThreatFox IOCs for 2026-06-20

Community reviews

Loading reviews…