Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-21

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 71

  • justkiddin.liveMirai botnet C2 domain (confidence level: 100%)
  • cdnpro-987.xyzIClickFix botnet C2 domain (confidence level: 50%)
  • cdnportal-us.xyzUnknown malware payload delivery domain (confidence level: 50%)
  • g9lo26em.shartland.comClearFake payload delivery domain (confidence level: 100%)
  • zamineravan.xyzClearFake payload delivery domain (confidence level: 100%)
  • bbzvqin8.zamineravan.xyzClearFake payload delivery domain (confidence level: 100%)
  • zamineravanshenasi.xyzClearFake payload delivery domain (confidence level: 100%)
  • xfq2kf92.angizeshfarahani.storeClearFake payload delivery domain (confidence level: 100%)
  • s3zzh7np.sigaribetkade.comClearFake payload delivery domain (confidence level: 100%)
  • xlp38wsp.yekiran.comClearFake payload delivery domain (confidence level: 100%)

URLs 20

  • http://110.36.86.0:55983/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://23.27.13.43/BeaverTail payload delivery URL (confidence level: 100%)
  • http://198.105.127.210/BeaverTail payload delivery URL (confidence level: 100%)
  • http://23.27.202.27:27017/BeaverTail payload delivery URL (confidence level: 100%)
  • http://82.144.86.37:38207/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://119.73.19.131:53332/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://110.38.254.172:58822/mozi.mMozi payload delivery URL (confidence level: 75%)
  • https://almontm.xyz/api/v1/sessionKongTuke payload delivery URL (confidence level: 100%)
  • https://almontm.xyz/api/v1/verifyKongTuke payload delivery URL (confidence level: 100%)
  • http://46.151.182.157:1337/api/psRapidStealer payload delivery URL (confidence level: 100%)

IP addresses 82

  • 23.27.13.43BeaverTail payload delivery server (confidence level: 100%)
  • 198.105.127.210BeaverTail payload delivery server (confidence level: 100%)
  • 23.27.202.27BeaverTail payload delivery server (confidence level: 100%)
  • 13.140.155.136RedTail payload delivery server (confidence level: 80%)
  • 167.172.152.94RedTail payload delivery server (confidence level: 80%)
  • 185.214.96.111XMRIG payload delivery server (confidence level: 80%)
  • 45.153.34.212XMRIG botnet C2 server (confidence level: 80%)
  • 150.138.182.190XOR DDoS payload delivery server (confidence level: 80%)
  • 87.249.134.3Tsunami payload delivery server (confidence level: 80%)
  • 193.32.126.167XMRIG payload delivery server (confidence level: 80%)

Hashes 117

  • f5c6be4753d6613c97f1b10c4d93a5d97a8f4fb21eb13da0ed04b23a8a61c2f6BeaverTail payload (confidence level: 100%)
  • 7520924e8d680263216a8eae31e6e2fc4424024ab61d7eb1503b663cb82811d2BeaverTail payload (confidence level: 100%)
  • c2bf4f7f74b80ed3d57473ba9e897fe5b8991e38a99343a46e0f8032e53a4ba7BeaverTail payload (confidence level: 100%)
  • 2011c98d44911abf78217ecc29dadb6c1dcb28506ac4970a1937eee54ccc31afNanocore RAT payload (confidence level: 95%)
  • e68d17c94b4d37b1a9639bbebc542dafec3f9db3Nanocore RAT payload (confidence level: 95%)
  • ce8dbd9fce3e739bfed8a23a96a92fe0Nanocore RAT payload (confidence level: 95%)
  • 6aa08b6fdb70023bdd14805657a5d4e36b5733b8b4c372c95ce2ec17668a0f11AsyncRAT payload (confidence level: 95%)
  • 5f8e51e3cbc4530d86c2ee6cf77ccaf77e7189a2AsyncRAT payload (confidence level: 95%)
  • 1e3c5aa594c8beaefb73e35b563379d7AsyncRAT payload (confidence level: 95%)
  • 0b3581ab2acd2099ec8d7de4f77608a0e9a1b7b4810009c7eb1cc4007d30d487TinyMet payload (confidence level: 95%)

Description

ThreatFox IOCs for 2026-06-21

Community reviews

Loading reviews…