Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-08-08

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 205

  • bstocks.netlify.appUnknown malware payload delivery domain (confidence level: 75%)
  • yeni.lolUnknown RAT botnet C2 domain (confidence level: 100%)
  • aiplaymate.xyzUnknown malware payload delivery domain (confidence level: 100%)
  • assholesgonewild.infoUnknown malware payload delivery domain (confidence level: 100%)
  • captainpepe.orgUnknown malware payload delivery domain (confidence level: 100%)
  • dadshirts.netUnknown malware payload delivery domain (confidence level: 100%)
  • duobizhi.netUnknown malware payload delivery domain (confidence level: 100%)
  • excellentquantum.comUnknown malware payload delivery domain (confidence level: 100%)
  • maxidogetoken.orgUnknown malware payload delivery domain (confidence level: 100%)
  • pepesnix.orgUnknown malware payload delivery domain (confidence level: 100%)

URLs 22

  • https://set.turbo88galaxy.topVidar botnet C2 (confidence level: 100%)
  • https://yeni.lol/mods/api/log-downloadUnknown RAT botnet C2 (confidence level: 100%)
  • https://yeni.lol/wsUnknown RAT botnet C2 (confidence level: 100%)
  • https://yeni.lol/?p=Unknown RAT botnet C2 (confidence level: 100%)
  • https://yeni.lol/get/configUnknown RAT botnet C2 (confidence level: 100%)
  • https://yeni.lol/babayla/zor/yarisirlar/Unknown RAT botnet C2 (confidence level: 100%)
  • http://86.107.168.105/boss.tstUnknown malware payload delivery URL (confidence level: 100%)
  • http://199.217.99.6/troubleshoot.ps1Unknown malware payload delivery URL (confidence level: 90%)
  • http://103.225.191.17:49732/mozi.mMozi payload delivery URL (confidence level: 75%)
  • https://indigocrest.top/middleware/scope-runtime.jsSmartApeSG payload delivery URL (confidence level: 75%)

IP addresses 111

  • 89.163.242.204Remus botnet C2 server (confidence level: 100%)
  • 134.122.204.55ValleyRAT botnet C2 server (confidence level: 50%)
  • 134.122.204.55ValleyRAT botnet C2 server (confidence level: 50%)
  • 167.99.64.180Aisuru botnet C2 server (confidence level: 100%)
  • 47.108.65.230VShell botnet C2 server (confidence level: 100%)
  • 47.95.194.145VShell botnet C2 server (confidence level: 100%)
  • 134.122.177.37VShell botnet C2 server (confidence level: 100%)
  • 139.224.204.211VShell botnet C2 server (confidence level: 100%)
  • 43.139.87.203Cobalt Strike botnet C2 server (confidence level: 100%)
  • 47.120.20.86Cobalt Strike botnet C2 server (confidence level: 100%)

Hashes 51

  • cfd5919b1f3d3add639bd324514c39f3807f93bbd75eb8efd576c72d26eea1bfPureRAT payload (confidence level: 95%)
  • f8715cf08dfd25ac10accf8f8d930d9cfbb606cePureRAT payload (confidence level: 95%)
  • 861a9b7ff7e91010cf002fb2b669bf1cPureRAT payload (confidence level: 95%)
  • 9a77e80a5ad7cf9df388338fc4988ac2b05c6f31249bdb356cc86f66be232022PureRAT payload (confidence level: 95%)
  • a3acb9e0ef8bdd2fb0225613864bd08cb44df87dPureRAT payload (confidence level: 95%)
  • 8f82374cae854dcc3df5a9a6e849de1cPureRAT payload (confidence level: 95%)
  • 3fd9f4172c8588c4df27fff1875a78da23ddc8242c0b3d07f87d45020c0d475dCreal Stealer payload (confidence level: 95%)
  • a6ca175a3e90cb6ed4821199638c6ddf898abebdCreal Stealer payload (confidence level: 95%)
  • a0b2deb23eb23221d713916f461230bbCreal Stealer payload (confidence level: 95%)
  • a8efe4ee25da7ed2f6255f18f3db86e0a204c7b4a275e57bcfc9a6adf3c52532Creal Stealer payload (confidence level: 95%)

Description

ThreatFox IOCs for 2026-08-08

Community reviews

Loading reviews…