Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-24

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 196

  • genddos.stMirai botnet C2 domain (confidence level: 100%)
  • three.followfromapps.icuClearFake payload delivery domain (confidence level: 50%)
  • reef-swan-lagoon.pages.devClearFake payload delivery domain (confidence level: 50%)
  • barmaleieba.lolVidar botnet C2 domain (confidence level: 100%)
  • cdn-speed.beerVidar botnet C2 domain (confidence level: 100%)
  • code.verification-claude-cdn.beerVidar botnet C2 domain (confidence level: 100%)
  • merkantalolol.asiaVidar botnet C2 domain (confidence level: 100%)
  • superboomer.worldVidar botnet C2 domain (confidence level: 100%)
  • globalchrome.comVidar botnet C2 domain (confidence level: 100%)
  • blackjacktipsnnt.comClearFake payload delivery domain (confidence level: 100%)

URLs 99

  • http://72.255.26.220:48951/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://153.117.15.25:54506/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://119.73.7.187:39650/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://103.98.191.25:49278/mozi.aMozi payload delivery URL (confidence level: 75%)
  • http://124.29.194.65:59822/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://153.117.37.46:40580/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://72.255.33.140:45838/mozi.aMozi payload delivery URL (confidence level: 75%)
  • http://103.197.112.191:35184/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://223.123.72.246:56586/mozi.mMozi payload delivery URL (confidence level: 75%)
  • https://spaceco.com/rkcSmartApeSG payload delivery URL (confidence level: 100%)

IP addresses 91

  • 192.142.28.77Mirai botnet C2 server (confidence level: 100%)
  • 129.212.233.8Aisuru botnet C2 server (confidence level: 100%)
  • 206.189.94.70Aisuru botnet C2 server (confidence level: 100%)
  • 49.233.9.4Cobalt Strike botnet C2 server (confidence level: 75%)
  • 149.248.3.38Unknown malware payload delivery server (confidence level: 75%)
  • 23.27.120.240Unknown malware botnet C2 server (confidence level: 75%)
  • 109.104.154.116Unknown malware botnet C2 server (confidence level: 75%)
  • 121.89.84.19VShell botnet C2 server (confidence level: 100%)
  • 173.214.167.253Remcos botnet C2 server (confidence level: 75%)
  • 176.65.132.25Nanocore RAT botnet C2 server (confidence level: 100%)

Hashes 51

  • aedc3120dd7be8cb7336e8e6ed9b31fcdc01e10bc51e3491053858a4d403f001Mirai payload (confidence level: 80%)
  • 33efcefc39dabf8181aaf22dfab876531a86beb077a0eb87c77c80c5dadf2fa3Mirai payload (confidence level: 80%)
  • 863bfa0c0feb80dcdb7b9d3312c141496ccaba5017d692f016482f020c3db3a2Mirai payload (confidence level: 80%)
  • 7b15e02eb1012a75718bdbb7e4eb296337f7ddab152a72caf81f4440abf101b5Mirai payload (confidence level: 80%)
  • bb2b445a438cd2091098112e40248b332da6d01378dacf5d48c97eba74e62151Mirai payload (confidence level: 80%)
  • fbde3dfeefcc05bd893b757804dbcf3c6f1abe2e12cc28291bd778e01aa28af9Mirai payload (confidence level: 80%)
  • 52746757fcaa032ec73fa1344c12a86295b170fd44cec5ece496279b29796a17Mirai payload (confidence level: 80%)
  • b35ea6b18e0bb373da551d5aef9353b9b63878a771f6930e41f37b332bdb8fd8Mirai payload (confidence level: 80%)
  • 3fc221b4c837deedba2a10c9334aeef33acf1dd287e04208e1e2929a56cb5cadMirai payload (confidence level: 80%)
  • 68e2eaaf831a3f3ae2009b349226218be68c7eb16c0cbb051c3dacb15f51a665Mirai payload (confidence level: 80%)

Description

ThreatFox IOCs for 2026-06-24

Community reviews

Loading reviews…