Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-08-01

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 159

  • cpnisnik.bearriverchiropractic.comClearFake payload delivery domain (confidence level: 100%)
  • fishersace.comClearFake payload delivery domain (confidence level: 100%)
  • ycazjth.fishersace.comClearFake payload delivery domain (confidence level: 100%)
  • 72mv6y0m.twinglassca.comClearFake payload delivery domain (confidence level: 100%)
  • franklintowing.netClearFake payload delivery domain (confidence level: 100%)
  • zpvedf.franklintowing.netClearFake payload delivery domain (confidence level: 100%)
  • fitfirst.netClearFake payload delivery domain (confidence level: 100%)
  • xfpjksx.fitfirst.netClearFake payload delivery domain (confidence level: 100%)
  • 9mqzhu71.sainidigirocket.comClearFake payload delivery domain (confidence level: 100%)
  • alejandromantilla.coIClickFix payload delivery domain (confidence level: 100%)

URLs 15

  • http://onesdto.shop:2535Remus botnet C2 (confidence level: 75%)
  • http://azurhay.shop:8539Remus botnet C2 (confidence level: 75%)
  • http://slyfogx.shop:5776Remus botnet C2 (confidence level: 75%)
  • http://sahalexchange.com:9504Remus botnet C2 (confidence level: 75%)
  • http://72.255.59.114:49386/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://kinderplow.com:5782Remus botnet C2 (confidence level: 75%)
  • http://staxta.click:5627Remus botnet C2 (confidence level: 75%)
  • https://irahook.best/get/configUnknown RAT botnet C2 (confidence level: 100%)
  • https://irahook.best/babayla/zor/yarisirlar/Unknown RAT botnet C2 (confidence level: 100%)
  • https://irahook.best/mods/api/log-downloadUnknown RAT botnet C2 (confidence level: 100%)

IP addresses 101

  • 137.184.70.190Aisuru botnet C2 server (confidence level: 100%)
  • 103.214.146.46Aisuru botnet C2 server (confidence level: 100%)
  • 206.189.81.41Aisuru botnet C2 server (confidence level: 100%)
  • 206.189.81.41Aisuru botnet C2 server (confidence level: 100%)
  • 157.20.182.22AsyncRAT botnet C2 server (confidence level: 100%)
  • 45.145.228.16Unknown malware botnet C2 server (confidence level: 100%)
  • 101.43.30.6VShell botnet C2 server (confidence level: 100%)
  • 103.56.112.128VShell botnet C2 server (confidence level: 100%)
  • 167.99.64.180Aisuru botnet C2 server (confidence level: 100%)
  • 47.107.224.89Aisuru botnet C2 server (confidence level: 100%)

Hashes 124

  • eefacb5cf039f7512c110564a489c7464032eea8ddb1781d3cac69db2f106d0dlampion payload (confidence level: 95%)
  • e9725da4441bb736b4a2834edc652dc7e3318ae8lampion payload (confidence level: 95%)
  • 9b80c3879f77b11b7207f8336101b486lampion payload (confidence level: 95%)
  • c14164aa5550fec91514f073f35bbd23c28bc7eb740bc930c1e29daf9a9ed9ceNanocore RAT payload (confidence level: 95%)
  • 366942ec7db8230627f3639842737414b36595cfNanocore RAT payload (confidence level: 95%)
  • 98cf0b60a8b4015d47165b49a68ad676Nanocore RAT payload (confidence level: 95%)
  • 656a0518875d72b0cce6b288cb71d13cc0b6afc3e45cf9b578b9092a3f7da2bfNanocore RAT payload (confidence level: 95%)
  • 8babc0a84bbb86bcdb697474595773bfb630869cNanocore RAT payload (confidence level: 95%)
  • 35a6cc6e2b588f30f7fb9cf4638ee632Nanocore RAT payload (confidence level: 95%)
  • a536b532e5ebaa0617688a42b5543b0a7144817e0dc12020826d74cc9b22c5a1SalatStealer payload (confidence level: 95%)

Description

ThreatFox IOCs for 2026-08-01

Community reviews

Loading reviews…