Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-08-14

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 280

  • afterhours.clickMirai botnet C2 domain (confidence level: 100%)
  • imagiraffe.shopMirai botnet C2 domain (confidence level: 100%)
  • nightslikethis.clubMirai botnet C2 domain (confidence level: 100%)
  • chickenfriedwatermelonkoolaid.storeMirai botnet C2 domain (confidence level: 100%)
  • odd-bar-f4c1.workers.devphp.shin_webshell botnet C2 domain (confidence level: 50%)
  • authorizecvv.ioAura Stealer botnet C2 domain (confidence level: 100%)
  • authorizecvv.inAura Stealer botnet C2 domain (confidence level: 100%)
  • authorizecvv.proAura Stealer botnet C2 domain (confidence level: 100%)
  • slon12.ccVidar botnet C2 domain (confidence level: 100%)
  • 557carlye.workers.devphp.shin_webshell botnet C2 domain (confidence level: 50%)

URLs 49

  • http://72.255.32.20:60289/mozi.aMozi payload delivery URL (confidence level: 75%)
  • http://175.107.221.53:58446/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://202.63.202.222:35712/mozi.mMozi payload delivery URL (confidence level: 75%)
  • http://144.31.57.113/Stealc botnet C2 (confidence level: 100%)
  • http://91.92.241.69/Stealc botnet C2 (confidence level: 100%)
  • https://mathiuu.surf/api/v1/statusKongTuke payload delivery URL (confidence level: 100%)
  • http://217.60.36.94/test/test.bef_friMoonPeak payload delivery URL (confidence level: 100%)
  • http://217.60.36.94/william/wi.txtMoonPeak payload delivery URL (confidence level: 100%)
  • http://217.60.36.94/test/p.txtMoonPeak payload delivery URL (confidence level: 100%)
  • http://64.227.172.9:8033/client_linuxUnknown Stealer payload delivery URL (confidence level: 100%)

IP addresses 84

  • 178.16.55.227Unknown malware botnet C2 server (confidence level: 100%)
  • 38.76.165.176Unknown malware botnet C2 server (confidence level: 100%)
  • 79.133.42.25Unknown malware botnet C2 server (confidence level: 100%)
  • 45.77.75.145Unknown malware botnet C2 server (confidence level: 100%)
  • 135.136.191.231Mirai botnet C2 server (confidence level: 100%)
  • 135.136.191.231Mirai botnet C2 server (confidence level: 100%)
  • 135.136.191.231Mirai botnet C2 server (confidence level: 100%)
  • 135.136.191.231Mirai botnet C2 server (confidence level: 100%)
  • 135.136.191.231Mirai botnet C2 server (confidence level: 100%)
  • 3.34.139.65Mirai botnet C2 server (confidence level: 100%)

Hashes 4

  • 877fb2b2d8800e7831f1912b37550627d97cd704a1592e16260a889473e90658MoonPeak payload (confidence level: 100%)
  • 39cef3a0e01334bf358bf0450209365bd5fbeff3b2ceea67684b7745e0c8f75cUnknown Stealer payload (confidence level: 100%)
  • 73103b5b1f8db1dbca392fbe84313fdbc3804d3718c1db9d67e721f761ffec50ClearFake payload (confidence level: 90%)
  • a9d1561ed0d23a5473d68069337e2f8e7862f7b72b74251eb63ccc883ba9459fAberebot payload (confidence level: 50%)

Description

ThreatFox IOCs for 2026-08-14

Community reviews

Loading reviews…