Skip to main content
IndicatorPublished 07/26/2026Updated 07/27/2026

ThreatFox IOCs for 2026-07-26

Source ThreatFox MISP Feed

0
  • TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 119

  • digilogjournal.comIClickFix payload delivery domain (confidence level: 100%)
  • 1stclassmovingtn.comKongTuke botnet C2 domain (confidence level: 50%)
  • americanjackets.usKongTuke botnet C2 domain (confidence level: 50%)
  • cozinca.com.brKongTuke botnet C2 domain (confidence level: 50%)
  • darkslateblue-gnu-453682.hostingersite.comKongTuke botnet C2 domain (confidence level: 50%)
  • devcon.cdKongTuke botnet C2 domain (confidence level: 50%)
  • entertainment.zincgroup.comKongTuke botnet C2 domain (confidence level: 50%)
  • findyourrootshairacademy.comKongTuke botnet C2 domain (confidence level: 50%)
  • frigor-refrigerationoils.comKongTuke botnet C2 domain (confidence level: 50%)
  • genesis-mfg.aeKongTuke botnet C2 domain (confidence level: 50%)

URLs 35

  • http://nerdsonsite.proClearFake botnet C2 (confidence level: 50%)
  • http://103.244.172.87:45274/mozi.aMozi payload delivery URL (confidence level: 75%)
  • http://130.12.209.147:55604/mozi.mMozi payload delivery URL (confidence level: 75%)
  • https://irahook.baby/babayla/zor/yarisirlar/Unknown RAT botnet C2 (confidence level: 100%)
  • https://irahook.baby/?p=Unknown RAT botnet C2 (confidence level: 100%)
  • https://irahook.baby/get/configUnknown RAT botnet C2 (confidence level: 100%)
  • https://irahook.baby/mods/api/log-downloadUnknown RAT botnet C2 (confidence level: 100%)
  • https://eco-megalabs.com/Unknown malware payload delivery URL (confidence level: 90%)
  • http://110.37.97.32:49108/mozi.aMozi payload delivery URL (confidence level: 75%)
  • http://153.117.14.186:37054/mozi.aMozi payload delivery URL (confidence level: 75%)

IP addresses 87

  • 137.184.135.42Aisuru botnet C2 server (confidence level: 100%)
  • 198.98.53.100Aisuru botnet C2 server (confidence level: 100%)
  • 106.75.11.70Cobalt Strike botnet C2 server (confidence level: 100%)
  • 81.70.97.147Cobalt Strike botnet C2 server (confidence level: 100%)
  • 115.55.239.136Unknown malware payload delivery server (confidence level: 75%)
  • 149.28.128.253Aisuru botnet C2 server (confidence level: 75%)
  • 200.234.219.26Havoc botnet C2 server (confidence level: 100%)
  • 206.119.165.25VShell botnet C2 server (confidence level: 100%)
  • 47.238.100.128Cobalt Strike botnet C2 server (confidence level: 100%)
  • 47.238.100.128Cobalt Strike botnet C2 server (confidence level: 100%)

Hashes 172

  • dce9ad6317ce147f1f3f74bc93d9252aINC payload (confidence level: 100%)
  • 85befc3111bc28dc9715570a068412baINC payload (confidence level: 100%)
  • 441455c95dcb94ae91a7a160fdbe827cINC payload (confidence level: 100%)
  • ec37a6c4866b7324fce2f11b0e89c4c2INC payload (confidence level: 100%)
  • d683b433754eca7b1e5c25279f711c99INC payload (confidence level: 100%)
  • 066c1f3b224c94baa2a2ae41a88386b9INC payload (confidence level: 100%)
  • acfa0c2374d79ee81b52d83625bc0c51INC payload (confidence level: 100%)
  • 78d359a87ae75ece08976e8b14d877feINC payload (confidence level: 100%)
  • fcc3cbe8bfe18f08eadda3acd4258369INC payload (confidence level: 100%)
  • a9bc032353bd246ba50af1b8d4849bfdINC payload (confidence level: 100%)

Description

ThreatFox IOCs for 2026-07-26

Community reviews

Loading reviews…