ThreatFox IOCs for 2026-08-04
Source ThreatFox MISP Feed
0
TLP:WHITE, disclosure is not limited
Indicators of compromise
Domains 173
- opnugp.littlehousetees.comClearFake payload delivery domain (confidence level: 100%)
- ipurqgt.federationofpbos.orgClearFake payload delivery domain (confidence level: 100%)
- a7r6cxyd.lacavamexicancocina.comClearFake payload delivery domain (confidence level: 100%)
- rnxsvbb.grannygshemporium.comClearFake payload delivery domain (confidence level: 100%)
- phpxta.lnlmotoring.comClearFake payload delivery domain (confidence level: 100%)
- slu.popi999.netVidar botnet C2 domain (confidence level: 100%)
- slu.cau777.orgVidar botnet C2 domain (confidence level: 100%)
- 7xa644hx.habbofutbol.comClearFake payload delivery domain (confidence level: 100%)
- makeverizyjar.infoClearFake botnet C2 domain (confidence level: 90%)
- pjptgapx.dusanperisicmd.comClearFake payload delivery domain (confidence level: 100%)
URLs 42
- https://lexingtoncancerfoundation.org/Vidar payload delivery URL (confidence level: 75%)
- https://corporate.mca.ca/Vidar payload delivery URL (confidence level: 75%)
- https://betensured-tips.com/Vidar payload delivery URL (confidence level: 75%)
- https://determinedresults.com/Vidar payload delivery URL (confidence level: 75%)
- https://muhammedmuheisen.com/Vidar payload delivery URL (confidence level: 75%)
- https://liobet.org/Vidar payload delivery URL (confidence level: 75%)
- https://slu.popi999.net/Vidar botnet C2 (confidence level: 100%)
- https://slu.cau777.org/Vidar botnet C2 (confidence level: 100%)
- https://slu.sinism188.top/Vidar botnet C2 (confidence level: 100%)
- http://glentraverse.com/kosSmartApeSG payload delivery URL (confidence level: 100%)
IP addresses 135
- 189.249.195.86Unknown malware botnet C2 server (confidence level: 100%)
- 130.94.115.222Unknown malware botnet C2 server (confidence level: 100%)
- 85.120.81.167Aisuru botnet C2 server (confidence level: 100%)
- 47.93.42.22AdaptixC2 botnet C2 server (confidence level: 100%)
- 107.173.241.193Unknown malware botnet C2 server (confidence level: 100%)
- 191.96.78.221AsyncRAT botnet C2 server (confidence level: 75%)
- 198.199.72.177Cobalt Strike botnet C2 server (confidence level: 50%)
- 107.173.241.193Unknown malware botnet C2 server (confidence level: 100%)
- 107.173.241.193Unknown malware botnet C2 server (confidence level: 100%)
- 107.173.241.193Unknown malware botnet C2 server (confidence level: 100%)
Hashes 15
- Unknown malware payload (confidence level: 100%)
- Unknown malware payload (confidence level: 100%)
- Unknown malware payload (confidence level: 100%)
- Unknown malware payload (confidence level: 100%)
- Unknown malware payload (confidence level: 100%)
- Unknown malware payload (confidence level: 100%)
- Unknown malware payload (confidence level: 100%)
- XWorm payload (confidence level: 95%)
- XWorm payload (confidence level: 95%)
- XWorm payload (confidence level: 95%)
Description
ThreatFox IOCs for 2026-08-04
Community reviews
Loading reviews…