Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-07-02

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 132

  • simultaneouslypower.comEtherRAT botnet C2 domain (confidence level: 100%)
  • wiselystarting.comEtherRAT botnet C2 domain (confidence level: 100%)
  • itemrange.comEtherRAT botnet C2 domain (confidence level: 100%)
  • sap.dev.rw.digitalUnknown malware payload delivery domain (confidence level: 75%)
  • essentialnestshop.comUnknown malware payload delivery domain (confidence level: 75%)
  • betkaka.betClearFake payload delivery domain (confidence level: 100%)
  • clysselw.betkaka.betClearFake payload delivery domain (confidence level: 100%)
  • sowmwvh.vip1xbet.orgClearFake payload delivery domain (confidence level: 100%)
  • bia2.betClearFake payload delivery domain (confidence level: 100%)
  • euroyek.bioClearFake payload delivery domain (confidence level: 100%)

URLs 39

  • https://schnicksch-tiernahrung.de/Unknown malware payload delivery URL (confidence level: 90%)
  • https://churchforsale.ca/Unknown malware payload delivery URL (confidence level: 90%)
  • https://alwadannews24.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://bleuhaven.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://cashforcars-pittsburgh.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://sunpermit.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://atrafen.com/Unknown malware payload delivery URL (confidence level: 90%)
  • https://ikinogo.net/Unknown malware payload delivery URL (confidence level: 90%)
  • https://dirtbgone.ie/Unknown malware payload delivery URL (confidence level: 90%)
  • https://www.tuttoinriviera.com/Unknown malware payload delivery URL (confidence level: 90%)

IP addresses 176

  • 154.220.95.122Unknown malware botnet C2 server (confidence level: 100%)
  • 157.230.237.88Aisuru botnet C2 server (confidence level: 100%)
  • 23.132.164.13Cobalt Strike botnet C2 server (confidence level: 50%)
  • 117.72.159.96Cobalt Strike botnet C2 server (confidence level: 100%)
  • 47.107.122.241VShell botnet C2 server (confidence level: 100%)
  • 198.23.177.200XWorm botnet C2 server (confidence level: 75%)
  • 158.160.191.88Unknown malware botnet C2 server (confidence level: 100%)
  • 154.220.120.226Unknown malware botnet C2 server (confidence level: 100%)
  • 154.220.120.227Unknown malware botnet C2 server (confidence level: 100%)
  • 154.220.120.229Unknown malware botnet C2 server (confidence level: 100%)

Hashes 81

  • 02727498170edcb29c041a632172eda8b43c89f7235346b03b174b3e5985bb38CrossRAT payload (confidence level: 95%)
  • e8a104ec01ee0fa1c25022eb13ae28150485f212CrossRAT payload (confidence level: 95%)
  • 683c7276bbdc7df8740788e245a461d5CrossRAT payload (confidence level: 95%)
  • eee97b264c2b0b6488dcf397800e16ac196ec495a6abd3c2623a020c36acdfd2SalatStealer payload (confidence level: 95%)
  • 26dc16413bce56a9da5deae93a6fcf1e53dcec7dSalatStealer payload (confidence level: 95%)
  • 9992290015ca21f58eab64953830a94dSalatStealer payload (confidence level: 95%)
  • 78695b566b8aff8f42cccc5e264693a64582fb29d814650830a16a8a210e82baSalatStealer payload (confidence level: 95%)
  • df112662c9613fc8a7459bc31708d9d96278d4dcSalatStealer payload (confidence level: 95%)
  • 1204670b07905cd586d001137e3c690fSalatStealer payload (confidence level: 95%)
  • 7776706d26fb2dfd7cb96910810bb4c3a02b343a228035a0ca4db3ccf8e4d26aXWorm payload (confidence level: 95%)

Description

ThreatFox IOCs for 2026-07-02

Community reviews

Loading reviews…