🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


1'251

IOCs shared (past 24 hours)

Vidar

Most seen malware family (past 24 hours)

1'822'975

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-09-29 12:51gwlap.org.au Unknown Loaderetherhiding sepolia varysz
2026-09-23 07:31jagtap.org IClickFixClickFix varysz
2026-03-20 12:55x0uqt2z1s1adreap.org BumbleBeeBUMBLEBEE abuse_ch
2026-01-02 19:05ic-cap.org Unknown StealerClickFix validin DaveLikesMalwre
2025-07-24 16:21simpieswap.org Unknown malwarec2 PunisherRip
2025-07-11 09:49cdn.valgap.org Miraic2 Mirai juroots
2025-05-04 10:35biswap.org-earn.com Unknown malwareс2 ninjacatcher
2025-05-02 12:44biswap.org-earn.net Unknown malwarec2 ninjacatcher
2023-11-30 14:08web-uniswap.org Hookc2 censys CLOUDFLARENET thehappydinoa
2022-12-23 18:27https://croap.org.br/IT.php QakBotBB11 iso QakBot qbot Quakbot TR U22 zip Cryptolaemus1
2022-12-20 20:36https://croap.org.br/uat/index.php QakBotBB11 IMG QakBot qbot Quakbot RR17 TR vhd zip Cryptolaemus1
2022-12-20 17:15https://gupap.org/see/index.php QakBotBB11 IMG QakBot qbot Quakbot RR17 TR vhd zip Cryptolaemus1
2022-12-19 16:41https://gupap.org/eet/index.php QakBotBB11 iso QakBot qbot Quakbot TR TR23 zip Cryptolaemus1
2022-12-19 16:33https://croap.org.br/pesu/index.php QakBotBB11 iso QakBot TR TR23 zip Cryptolaemus1
2022-12-19 16:33gupap.org QakBotBB11 iso QakBot TR TR23 zip Cryptolaemus1
2022-12-19 16:31croap.org.br QakBotBB11 iso QakBot TR TR23 zip Cryptolaemus1
2021-12-03 03:37http://dotheswap.org/illumqui/nonrem-5244681 QakBotchaserldr QakBot TR zip Cryptolaemus1
2021-12-03 03:37http://dotheswap.org/illumqui/cumqueomnis-7492453 QakBotchaserldr QakBot TR zip Cryptolaemus1
2021-09-01 06:46https://powertap.org:443/access/ Cobalt StrikeCobaltStrike NexusFuzzy