ThreatFox IOCs for 2026-08-03
Source ThreatFox MISP Feed
0
TLP:WHITE, disclosure is not limited
Indicators of compromise
Domains 136
- akdsoev.eachway-multiplier.comClearFake payload delivery domain (confidence level: 100%)
- gw7pvrql.hectortm-plumbing.comClearFake payload delivery domain (confidence level: 100%)
- 7qvht67q.angebagnia.comClearFake payload delivery domain (confidence level: 100%)
- gif4ttuk.habbofutbol.comClearFake payload delivery domain (confidence level: 100%)
- avgfrfd.gorbio-echos.comClearFake payload delivery domain (confidence level: 100%)
- qppbkj.jackpot888.de.comClearFake payload delivery domain (confidence level: 100%)
- blazerpro.proUnknown malware payload delivery domain (confidence level: 75%)
- eyzdfx.jackpotslot.de.comClearFake payload delivery domain (confidence level: 100%)
- wczkcbe.halcyonhempltd.comClearFake payload delivery domain (confidence level: 100%)
- akdczp.jackyleeschinesecuisine.comClearFake payload delivery domain (confidence level: 100%)
URLs 102
- http://103.174.243.198:48214/mozi.mMozi payload delivery URL (confidence level: 75%)
- http://uiccvbk.click:8839Remus botnet C2 (confidence level: 75%)
- http://31.56.209.153/nz.shUnknown malware payload delivery URL (confidence level: 75%)
- http://223.123.71.61:57047/mozi.mMozi payload delivery URL (confidence level: 75%)
- http://151.233.179.226:35297/mozi.7Mozi payload delivery URL (confidence level: 75%)
- http://27.215.181.160:36250/mozi.mMozi payload delivery URL (confidence level: 75%)
- https://steamcommunity.com/profiles/76561198664897346Vidar botnet C2 (confidence level: 100%)
- https://steamcommunity.com/profiles/76561198667588759Vidar botnet C2 (confidence level: 100%)
- https://t.me/x0xprsVidar botnet C2 (confidence level: 100%)
- https://dnz.cau777.org/Vidar botnet C2 (confidence level: 100%)
IP addresses 131
- 168.144.138.186Aisuru botnet C2 server (confidence level: 100%)
- 144.124.239.18Aisuru botnet C2 server (confidence level: 100%)
- 198.98.53.100Aisuru botnet C2 server (confidence level: 100%)
- 165.245.219.184Aisuru botnet C2 server (confidence level: 100%)
- 154.12.237.176Remus botnet C2 server (confidence level: 100%)
- 82.156.11.154Cobalt Strike botnet C2 server (confidence level: 100%)
- 82.156.11.154Cobalt Strike botnet C2 server (confidence level: 100%)
- 82.156.11.154Cobalt Strike botnet C2 server (confidence level: 100%)
- 82.156.11.154Cobalt Strike botnet C2 server (confidence level: 100%)
- 82.156.11.154Cobalt Strike botnet C2 server (confidence level: 100%)
Description
ThreatFox IOCs for 2026-08-03
Community reviews
Loading reviews…