Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-06-27

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 59

  • sdnstatistic.comUnknown malware botnet C2 domain (confidence level: 50%)
  • olddenver.xyzUnknown malware botnet C2 domain (confidence level: 50%)
  • africadasi.orgUnknown malware payload delivery domain (confidence level: 75%)
  • skillboxultra.liveUnknown Stealer botnet C2 domain (confidence level: 100%)
  • sailboaterists.netUnknown malware botnet C2 domain (confidence level: 75%)
  • bins.oceanic-node.suMirai payload delivery domain (confidence level: 75%)
  • c2uwzjf8.blackjackonlineplay83.comClearFake payload delivery domain (confidence level: 100%)
  • tszebpwz.1xprobet.appClearFake payload delivery domain (confidence level: 100%)
  • 7pkztjkc.1xbetpartnersiran.comClearFake payload delivery domain (confidence level: 100%)
  • samplerace.infoUnknown Loader payload delivery domain (confidence level: 100%)

URLs 20

  • http://36.255.40.171:34374/mozi.aMozi payload delivery URL (confidence level: 75%)
  • http://172.245.25.134:8787/collectUnknown malware botnet C2 (confidence level: 75%)
  • http://bins.oceanic-node.su/wget.shMirai payload delivery URL (confidence level: 75%)
  • http://72.255.33.12:55798/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://103.31.100.79:57731/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://110.36.28.183:54729/mozi.7Mozi payload delivery URL (confidence level: 75%)
  • http://60.23.235.10:40564/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://185.194.175.132:8000/api/endpoint.phpUnknown malware botnet C2 (confidence level: 100%)
  • https://smartpos.com.tr/Vidar payload delivery URL (confidence level: 75%)
  • http://millersteelusa.com:8893Remus botnet C2 (confidence level: 75%)

IP addresses 96

  • 192.162.199.186Stealc botnet C2 server (confidence level: 75%)
  • 196.251.107.186SolarisLoader botnet C2 server (confidence level: 75%)
  • 147.182.140.2Aisuru botnet C2 server (confidence level: 100%)
  • 172.245.25.134Unknown malware botnet C2 server (confidence level: 75%)
  • 129.212.233.8Aisuru botnet C2 server (confidence level: 100%)
  • 45.11.229.45Aisuru botnet C2 server (confidence level: 100%)
  • 15.204.234.74Mirai payload delivery server (confidence level: 75%)
  • 147.182.140.2Aisuru botnet C2 server (confidence level: 100%)
  • 193.169.194.63AdaptixC2 botnet C2 server (confidence level: 100%)
  • 47.108.60.27Cobalt Strike botnet C2 server (confidence level: 50%)

Hashes 37

  • 275e5b085534f64313b50cbdcb08ecd59c57d21c96bb937f140ee92a3d27f792Unknown malware payload (confidence level: 75%)
  • 1b9e167757acd83c27a58de454cdc67af447c16422e8568ac08491de01ca7caaUnknown malware payload (confidence level: 75%)
  • 39fa0fa694213d27c09ff2da27ae8a08866a36edece31e0c14312a4d42eb5fb4Unknown malware payload (confidence level: 75%)
  • 50d9c3519a2fb107671c7d0151aa2ea2e15143d732821ec381732876e487034dUnknown malware payload (confidence level: 75%)
  • 49281a9d741515d1ece2051fc1c5f7fac2c54c73f5e96c32a70d6729cdb94e4eUnknown malware payload (confidence level: 75%)
  • d42e4181eb28a34149d95e716d63e9dcbe07c9f93f630bc7f6f19afda19bf3fcCryptoRansomeware payload (confidence level: 75%)
  • a7aa93ad69ee4641c9346eea3456415dbb00be679940d5070db0587894ede987CryptoRansomeware payload (confidence level: 75%)
  • cb1dd59ac326416b84a5c28ced438a25518d4b5fadfbb9c979ed319db844cda7CryptoRansomeware payload (confidence level: 75%)
  • 0013d3a2143469022ce41148f0df1898a5c7f122bc5d2842139d47054178f83cUACMe payload (confidence level: 75%)
  • 3142e7ca3dbe7756b792ba425bf4e3c3b856c430647a8c51126a38993f916451CryptoRansomeware payload (confidence level: 75%)

Description

ThreatFox IOCs for 2026-06-27

Community reviews

Loading reviews…