Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-08-07

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 255

  • housemill9911.digitalIClickFix payload delivery domain (confidence level: 100%)
  • grove-89.comUnknown malware payload delivery domain (confidence level: 100%)
  • bimbalok.proClearFake botnet C2 domain (confidence level: 90%)
  • homebuildmanual.comClearFake payload delivery domain (confidence level: 90%)
  • homeworkhelpersmarin.comClearFake payload delivery domain (confidence level: 90%)
  • howmanylakhs.comClearFake payload delivery domain (confidence level: 90%)
  • homephysiopc.comClearFake payload delivery domain (confidence level: 90%)
  • kkitchenfishday.comClearFake payload delivery domain (confidence level: 90%)
  • kosharygreensboro.comClearFake payload delivery domain (confidence level: 90%)
  • valley-open-mri.comClearFake payload delivery domain (confidence level: 100%)

URLs 29

  • http://touggch.click:9022Remus botnet C2 (confidence level: 75%)
  • https://roofvo.com/wp-links-cat.phpIClickFix payload delivery URL (confidence level: 100%)
  • https://fsdmkfskdojyttt.pro/uuee.jsIClickFix payload delivery URL (confidence level: 100%)
  • https://quietshalecompany.com/Unknown malware payload delivery URL (confidence level: 100%)
  • https://generatoryieldlab.com/Unknown malware payload delivery URL (confidence level: 100%)
  • https://simplecopseholding.com/Unknown malware payload delivery URL (confidence level: 100%)
  • http://165.22.69.214/cat.shUnknown malware payload delivery URL (confidence level: 75%)
  • https://65.109.72.175/Vidar botnet C2 (confidence level: 100%)
  • https://167.233.160.192/Vidar botnet C2 (confidence level: 100%)
  • https://178.105.30.143/Vidar botnet C2 (confidence level: 100%)

IP addresses 104

  • 139.59.144.8Aisuru botnet C2 server (confidence level: 100%)
  • 159.203.172.232Aisuru botnet C2 server (confidence level: 100%)
  • 60.247.206.23Cobalt Strike botnet C2 server (confidence level: 100%)
  • 60.247.206.23Cobalt Strike botnet C2 server (confidence level: 100%)
  • 60.247.206.23Cobalt Strike botnet C2 server (confidence level: 100%)
  • 49.233.13.225VShell botnet C2 server (confidence level: 100%)
  • 38.147.170.102VShell botnet C2 server (confidence level: 100%)
  • 159.65.11.219VShell botnet C2 server (confidence level: 100%)
  • 18.195.123.92VShell botnet C2 server (confidence level: 100%)
  • 192.255.236.156VShell botnet C2 server (confidence level: 100%)

Hashes 8

  • 29be0f56275f051181ea3ec37ddc3d3807cde34cb65de855709fae0e13786a40Unknown malware payload (confidence level: 100%)
  • 2169ff5e7be77fc3ff72758f9fa50658Unknown malware payload (confidence level: 100%)
  • a2ec2f6652726cc4d491e1dfd86f206837cef57a1d81fa5c6c0e7bbd364fbcd6ClearFake payload (confidence level: 90%)
  • b0209a56237964228cbd95cfe7ee4c639e20da8bfb01bc19e84e43cb3d832c01Amatera payload (confidence level: 100%)
  • c4a461b72c5bfa08d4bffa4d10d265d3777efeb4066566442b11220cd48b88c6Amatera payload (confidence level: 100%)
  • f31df9170d3d70c2e3a84e56f1dabe093f19c79013a4d741cda3697ab2a93eedAmatera payload (confidence level: 100%)
  • 5fa116e699f23e230c6c17a47d499feae725069ec5186196df24a7346e0f77f5Amatera payload (confidence level: 100%)
  • a7e8bb5263b34be020d8b5c938b4c4187f390b9240f9ce757cae953da9988227Amatera payload (confidence level: 100%)

Description

ThreatFox IOCs for 2026-08-07

Community reviews

Loading reviews…