Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-07-29

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 113

  • bornilob43.lifeIClickFix botnet C2 domain (confidence level: 100%)
  • webgleam.infoIClickFix botnet C2 domain (confidence level: 100%)
  • borny51221.icuIClickFix botnet C2 domain (confidence level: 100%)
  • road.swedencentral.cloudapp.azure.comEtherRAT botnet C2 domain (confidence level: 100%)
  • downloadupdate.centralus.cloudapp.azure.comEtherRAT botnet C2 domain (confidence level: 100%)
  • softwarecube.eastus.cloudapp.azure.comEtherRAT botnet C2 domain (confidence level: 100%)
  • pool.swedencentral.cloudapp.azure.comEtherRAT botnet C2 domain (confidence level: 100%)
  • googlanalitlcs.icuIClickFix botnet C2 domain (confidence level: 100%)
  • jkqhdbbbqwiujkaz.hopto.orgMirai botnet C2 domain (confidence level: 100%)
  • fairpi521.icuIClickFix botnet C2 domain (confidence level: 100%)

URLs 3

  • http://103.174.243.204:39667/mozi.mMozi payload delivery URL (confidence level: 75%)
  • https://novacupola.top/role/logout-header.jsSmartApeSG payload delivery URL (confidence level: 100%)
  • http://124.29.247.76:57576/mozi.mMozi payload delivery URL (confidence level: 75%)

IP addresses 42

  • 45.74.3.37Mirai botnet C2 server (confidence level: 100%)
  • 175.119.7.220XMRIG payload delivery server (confidence level: 80%)
  • 168.144.138.186Aisuru botnet C2 server (confidence level: 100%)
  • 176.96.136.230PureRAT botnet C2 server (confidence level: 50%)
  • 31.57.184.154PureRAT botnet C2 server (confidence level: 50%)
  • 45.192.211.7PureRAT botnet C2 server (confidence level: 50%)
  • 103.68.109.13PureRAT botnet C2 server (confidence level: 50%)
  • 151.242.63.149PureRAT botnet C2 server (confidence level: 50%)
  • 176.96.136.230PureRAT botnet C2 server (confidence level: 50%)
  • 217.76.50.71Remus botnet C2 server (confidence level: 100%)

Hashes 300

  • a8ab5c112f0e6f7f2762b0f96fd16da312af98820d46a79f58689abdb679d561Unknown malware payload (confidence level: 100%)
  • db1c34c476992207687f8b5f5399c93bdb0e2d3ef4bc9a1ece0323807781fee1Unknown malware payload (confidence level: 50%)
  • 378baecbc1329fce4adade7eebd667b05755bf2daf871df562056d23b214c968Unknown malware payload (confidence level: 50%)
  • d8e6eacb8f8cbf06fb5089b2a7cb13b7dab2f613468e9070df46801833d44053Unknown malware payload (confidence level: 50%)
  • 926a8639da6c1441c63e93ffe81af13d4c574fb6980f2264334e5c9bff4cc765Unknown malware payload (confidence level: 50%)
  • b86e4d509e3b5a9a7027b164ca9f372cd560dc8c3f4318ef12612a5fa22a31dcUnknown malware payload (confidence level: 50%)
  • 3263e0dcb0c6019ea9064aadf598af9fbe7d587c619c71a54d08a50f471328f4Unknown malware payload (confidence level: 50%)
  • c23cd0e6d4d223ea09df4b6edc60720a84ed1d7510323b21c8e0c7cce39bf6d2Unknown malware payload (confidence level: 50%)
  • f92a7df2fa01f423c6cea1c29fbaf71c14c02b5ad208be7e26437ed0555f26d5Unknown malware payload (confidence level: 50%)
  • 5dbf10fe9e1f70aeb801ca4fa4b6c8e8e3f0b470618d703917a95339a9fe70cfUnknown malware payload (confidence level: 50%)

Description

ThreatFox IOCs for 2026-07-29

Community reviews

Loading reviews…