Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-08-04

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 173

  • opnugp.littlehousetees.comClearFake payload delivery domain (confidence level: 100%)
  • ipurqgt.federationofpbos.orgClearFake payload delivery domain (confidence level: 100%)
  • a7r6cxyd.lacavamexicancocina.comClearFake payload delivery domain (confidence level: 100%)
  • rnxsvbb.grannygshemporium.comClearFake payload delivery domain (confidence level: 100%)
  • phpxta.lnlmotoring.comClearFake payload delivery domain (confidence level: 100%)
  • slu.popi999.netVidar botnet C2 domain (confidence level: 100%)
  • slu.cau777.orgVidar botnet C2 domain (confidence level: 100%)
  • 7xa644hx.habbofutbol.comClearFake payload delivery domain (confidence level: 100%)
  • makeverizyjar.infoClearFake botnet C2 domain (confidence level: 90%)
  • pjptgapx.dusanperisicmd.comClearFake payload delivery domain (confidence level: 100%)

URLs 42

  • https://lexingtoncancerfoundation.org/Vidar payload delivery URL (confidence level: 75%)
  • https://corporate.mca.ca/Vidar payload delivery URL (confidence level: 75%)
  • https://betensured-tips.com/Vidar payload delivery URL (confidence level: 75%)
  • https://determinedresults.com/Vidar payload delivery URL (confidence level: 75%)
  • https://muhammedmuheisen.com/Vidar payload delivery URL (confidence level: 75%)
  • https://liobet.org/Vidar payload delivery URL (confidence level: 75%)
  • https://slu.popi999.net/Vidar botnet C2 (confidence level: 100%)
  • https://slu.cau777.org/Vidar botnet C2 (confidence level: 100%)
  • https://slu.sinism188.top/Vidar botnet C2 (confidence level: 100%)
  • http://glentraverse.com/kosSmartApeSG payload delivery URL (confidence level: 100%)

IP addresses 135

  • 189.249.195.86Unknown malware botnet C2 server (confidence level: 100%)
  • 130.94.115.222Unknown malware botnet C2 server (confidence level: 100%)
  • 85.120.81.167Aisuru botnet C2 server (confidence level: 100%)
  • 47.93.42.22AdaptixC2 botnet C2 server (confidence level: 100%)
  • 107.173.241.193Unknown malware botnet C2 server (confidence level: 100%)
  • 191.96.78.221AsyncRAT botnet C2 server (confidence level: 75%)
  • 198.199.72.177Cobalt Strike botnet C2 server (confidence level: 50%)
  • 107.173.241.193Unknown malware botnet C2 server (confidence level: 100%)
  • 107.173.241.193Unknown malware botnet C2 server (confidence level: 100%)
  • 107.173.241.193Unknown malware botnet C2 server (confidence level: 100%)

Hashes 15

  • 2ff86a4fdfec4a5b49d5545f9a62ec4cUnknown malware payload (confidence level: 100%)
  • cc2c8ac5aea8d7c36e9161d54e4255f3Unknown malware payload (confidence level: 100%)
  • 4966992c81f7062ed3913ee023240edcUnknown malware payload (confidence level: 100%)
  • a8e9a638aa9e1c2d73f3432b997d7a7fUnknown malware payload (confidence level: 100%)
  • ced4c9b53c3c93a4dbefe2f243cd1c71Unknown malware payload (confidence level: 100%)
  • 1ef19373aae940002a980a984f25555bUnknown malware payload (confidence level: 100%)
  • ea3f9230bb76deb18dedfaea490fd687Unknown malware payload (confidence level: 100%)
  • 833b709b93b80919dc06d8b0619de8919df283060dd9fdb9da6bd4d9b778ca7aXWorm payload (confidence level: 95%)
  • 96a837eee8332c0d27efcad1537000001e5aa86dXWorm payload (confidence level: 95%)
  • 2bb1b024135ef7b0af3141d389530d82XWorm payload (confidence level: 95%)

Description

ThreatFox IOCs for 2026-08-04

Community reviews

Loading reviews…