ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


624

IOCs shared (past 24 hours)

ClearFake

Most seen malware family (past 24 hours)

1'725'069

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-06-11 05:25https://github.com/hothehottest/Recaptcha-2/releases/download/Recaptcha-2/boost.zip Unknown malwareClickFix Electron github-releases trojanized-app Lenny3BO
2026-05-08 08:00https://github.com/MoonlightPumpkin/API_SETTINGS Unknown malwareaxiom-wallets-lure custom-implant github-abuse png-steg steganography xor-steg Lenny_3BO
2026-04-24 08:50https://api.github.com/search/commits?q=beautifulcastle Unknown malwareteampcp johannes
2026-04-24 08:50https://api.github.com/search/commits?q=LongLiveTheResistanceAgainstMachines Shai-Hulud johannes
2026-03-30 16:50https://github.com/charlie-60/R/raw/refs/heads/main/MasonRootkit.exe Unknown RATGithub MasonRAT NeptuneRAT Lenny_3BO
2026-03-27 14:55https://github.com/babka98/horinis/blob/main/split.msi Unknown malwareClickFix payload HuntYethHounds
2026-03-27 14:54https://github.com/babka98/horinis/blob/main/monkey.msi Unknown malwareClickFix payload HuntYethHounds
2026-03-27 14:54https://github.com/babka98/horinis/blob/main/gatsby.msi Unknown malwareClickFix payload HuntYethHounds
2026-03-27 14:53https://github.com/babka98/horinis/blob/main/Toshi2.msi Unknown malwareClickFix payload HuntYethHounds
2026-03-27 14:53https://github.com/babka98/horinis/blob/main/Sinobu.msi Unknown malwareClickFix payload HuntYethHounds
2026-03-23 22:15https://github.com/desodlyrix474/12/raw/refs/heads/main/css.js Unknown malwareClickFix ErrTraffic HuntYethHounds
2026-03-14 08:28https://github.com/4realgg/Helper-Update1.0/releases/download/update1/mw--58389c35-c76b-46ac-b33e-7efe83b65fda.zip Unknown malwareClickFix NetSupport RAT HuntYethHounds
2026-02-21 15:20https://github.com/dotnet/corefx/tree/30ab651fcb4354552bd4891619a0bdd81e0ebdbf Unknown Loadershortloader juroots
2026-01-05 14:44https://github.com/gstatic-kh5q6ekh/cdn-113-cloud/blob/main/eos24) ClearFakeClearFake threatcat_ch
2026-01-05 07:47https://github.com/gstatic-kh5q6ekh/cdn-113-cloud/releases/download/static/id-owf836aos ClearFakeClearFake threatcat_ch
2026-01-04 19:14https://github.com/atoragivapo50/Flashbulb-Iodize/releases/download/123/gstate ClearFakeClearFake threatcat_ch
2025-10-07 18:38https://github.com/ASMRoyal/CD4/releases/download/CD4/cd4.exe Unknown malwarec2-monitor-auto dropped-by-amadey exe Github stealer urlhaus Pikachu
2025-08-25 14:24https://github.com/kxo5eGGF9UzpqX3xZus/kxo5eGGF9UzphqX3xZus/releases/download/v1.0/Launcher.exe Unknown Loadershortloader juroots
2025-08-17 16:34https://github.com/Loredana221/tewst/raw/refs/heads/main/Owjlzu.exe PureCrypter pitachu
2025-08-17 16:34https://github.com/Loredana221/tewst/raw/refs/heads/main/ccr.exe SparkRAT pitachu
2025-08-17 16:34https://github.com/Loredana221/tewst/raw/refs/heads/main/paid.exe PureCrypter pitachu
2025-08-17 16:34https://github.com/VetiGoders/lavidaloca/raw/refs/heads/main/Client.exe XWorm pitachu
2025-07-15 05:55https://github.com/cryptsniper/sniperchek/releases/download/1%2C0/GMBH_2.2.zip Lumma StealerLumma vovaan
2025-07-12 17:36https://github.com/SP-DereckDaschke/GMBH/releases/download/2.2/GMBH_2.2.zip Lumma Stealerinfostealer Lumma stealer vovaan
2025-06-06 20:02login.portal-github.com Unknown malwareAS12479 censys EvilGinx panel phishing UNI2-AS DonPasci
2025-05-20 10:25https://github.com/auracodersigmatoilete/storage/raw/refs/heads/main/ip.txt Quasar RAT20May2025 iocbottest Gi7w0rm
2025-04-02 06:27https://github.com/ROMILDOVAZ/musicas/releases/download/fdsfdsf/Setuvlast.zip Lumma StealerGithub Lumma Lumma Stealer stealer RacWatchin8872
2025-01-12 20:56reset-github.com Cobalt StrikeCobaltStrike drb-ra abuse_ch
2024-12-01 08:30https://github.com/user-attachments/files/17466420/Software.zip/ SmartLoaderSmartLoader incrypter
2024-05-11 12:25https://github.com/sendgrid/krampus/files/15199097/Krampus.zip SmartLoaderKrampus lua SmartLoader NDA0E
2024-04-29 07:06https://github.com/delta-io/delta/files/15016110/Delta.zip SmartLoaderDelta lua SmartLoader NDA0E
2024-04-29 07:06https://github.com/Kampfkarren/Roblox/files/15001743/Roexec.zip SmartLoaderlua Roexec SmartLoader NDA0E
2024-02-13 07:09https://github.com/microsoft/vcpkg/files/14125503/Cheat.Lab.2.7.2.zip RedLine Stealerzgrat e24111111111111
2023-11-25 03:52https://github.com/asdasrqweq/congenial-goggles MetaStealerstealer thehappydinoa
2023-11-12 18:14https://github.com/AdelionKing/DodoMan RedLine Stealerstealer thehappydinoa
2023-11-12 18:14https://github.com/DigitoRomdo/Pulsar4 RedLine Stealerstealer thehappydinoa
2023-11-12 18:14https://github.com/AdolfGitler23/4 RedLine Stealerstealer thehappydinoa
2023-11-12 17:37https://github.com/Nlzow/MemoriesLaun RedLine Stealerstealer thehappydinoa
2023-06-06 17:04https://github.com/Azex360/WeSoft-All-Software-In-One-Program RedLine StealerRedLine crep1x
2023-06-06 17:04https://github.com/Eliaz7/We-Softing-All-Soft-For-You RedLine StealerRedLine crep1x
2023-06-06 17:04https://github.com/Maksiminer/WeSoft RedLine StealerRedLine crep1x
2023-06-06 17:04https://github.com/Nu11xiety/WeSoftware RedLine StealerRedLine crep1x
2022-11-10 08:04https://github.com/smbfhrgc VidarVidar crep1x
2022-07-31 20:58https://github.com/PhotoshopInstall/Photoshop/releases/download/Photoshop/Adobe-Photoshop-CC-2022-1.4.zip Raccoonraccoon stealer crep1x