ThreatFox IOCs for 2026-08-05
Source ThreatFox MISP Feed
0
TLP:WHITE, disclosure is not limited
Indicators of compromise
Domains 140
- poop.gardenMirai botnet C2 domain (confidence level: 100%)
- vaillyharry9988.icuUnknown malware payload delivery domain (confidence level: 100%)
- roadsteriio981.icuUnknown malware payload delivery domain (confidence level: 100%)
- dollllar881122.icuUnknown malware payload delivery domain (confidence level: 100%)
- chocolate412932.icuUnknown malware payload delivery domain (confidence level: 100%)
- pureglamlb.comClearFake payload delivery domain (confidence level: 100%)
- zoihkb.pureglamlb.comClearFake payload delivery domain (confidence level: 100%)
- kjjhdkx.abcdbro.comClearFake payload delivery domain (confidence level: 100%)
- q96rou1o.necedubd.comClearFake payload delivery domain (confidence level: 100%)
- connect.podium.comFAKEUPDATES payload delivery domain (confidence level: 50%)
URLs 32
- http://139.135.42.179:41902/mozi.mMozi payload delivery URL (confidence level: 75%)
- http://61.174.163.220:39657/mozi.mMozi payload delivery URL (confidence level: 75%)
- http://103.148.128.154:35695/mozi.mMozi payload delivery URL (confidence level: 75%)
- http://103.186.77.64:51823/mozi.mMozi payload delivery URL (confidence level: 75%)
- http://125.41.245.63:39395/mozi.mMozi payload delivery URL (confidence level: 75%)
- http://46.226.162.241/411f7d3bff31a?force=1Unknown malware payload delivery URL (confidence level: 100%)
- http://46.226.162.241/d90acb823cb7c7?force=1Unknown malware payload delivery URL (confidence level: 100%)
- http://46.226.162.241/211f79a06c?force=1Unknown malware payload delivery URL (confidence level: 100%)
- http://175.107.233.106:48152/mozi.aMozi payload delivery URL (confidence level: 75%)
- http://182.113.35.171:56533/mozi.mMozi payload delivery URL (confidence level: 75%)
IP addresses 161
- 91.208.162.129Aisuru botnet C2 server (confidence level: 100%)
- 209.145.55.206Remus botnet C2 server (confidence level: 100%)
- 176.65.148.145Mirai payload delivery server (confidence level: 100%)
- 178.83.206.213Mirai botnet C2 server (confidence level: 100%)
- 155.103.69.225Mirai botnet C2 server (confidence level: 100%)
- 155.103.69.225Mirai botnet C2 server (confidence level: 100%)
- 155.103.69.225Mirai botnet C2 server (confidence level: 100%)
- 155.103.69.225Mirai botnet C2 server (confidence level: 100%)
- 137.184.70.190Aisuru botnet C2 server (confidence level: 100%)
- 167.99.64.180Aisuru botnet C2 server (confidence level: 100%)
Hashes 6
- Unknown malware payload (confidence level: 100%)
- Unknown malware payload (confidence level: 100%)
- ClearFake payload (confidence level: 90%)
- Vidar payload (confidence level: 75%)
- Vidar payload (confidence level: 75%)
- ClearFake payload (confidence level: 90%)
Description
ThreatFox IOCs for 2026-08-05
Community reviews
Loading reviews…