🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


2'394

IOCs shared (past 24 hours)

Vidar

Most seen malware family (past 24 hours)

1'819'414

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-10-06 08:45mediaart.gleeze.com AsyncRATasyncrat abuse_ch
2026-09-22 17:40dhdhro456.gleeze.com LxBase RATLxBaseRAT RAT abuse_ch
2026-08-13 14:00winnerscorner.gleeze.com Remcosremcos abuse_ch
2026-06-08 06:36googlednsv1.gleeze.com NjRAT uwucutecatgirl
2026-04-09 10:00throt2.gleeze.com Remcosremcos dyingbreeds_
2026-04-02 12:02olowo.gleeze.com Remcosc2 domain RAT remcos triage DonPasci
2025-12-28 12:01kidplay.gleeze.com AsyncRATasyncrat c2 domain RAT triage DonPasci
2025-11-29 12:01somwayz.gleeze.com Remcosc2 domain RAT remcos triage DonPasci
2025-11-23 01:26mimaletamusical.gleeze.com Quasar RATquasar abuse_ch
2025-11-01 12:44winner999.gleeze.com Remcosc2 remcos juroots
2025-09-13 11:44azurebrief.gleeze.com SpyNote13September2025 iocbottest Gi7w0rm
2025-09-07 12:01masqingtestformat.gleeze.com XWormc2 domain triage XWorm DonPasci
2025-06-28 22:25port6.gleeze.com Quasar RAT29June2025 iocbottest Gi7w0rm
2025-06-28 22:25portport.gleeze.com Quasar RAT29June2025 iocbottest Gi7w0rm
2025-06-28 22:25port1.gleeze.com Quasar RAT29June2025 iocbottest Gi7w0rm
2025-06-28 22:25port3.gleeze.com Quasar RAT29June2025 iocbottest Gi7w0rm
2025-06-12 11:00propios.gleeze.com Remcosc2 remcos juroots
2025-02-27 13:42mlwoe.gleeze.com AsyncRAT27February2025 iocbottest Gi7w0rm
2025-02-27 04:00wpzvlds.gleeze.com AsyncRATAS57724 asyncrat c2 censys DDOS-GUARD RAT DonPasci
2025-02-04 06:47otrodia8912.gleeze.com AsyncRATasyncrat c2 juroots
2025-02-03 18:19gracedynu.gleeze.com NetWire RC3February2025 iocbottest Gi7w0rm
2025-01-30 14:03netzirecolq.gleeze.com NetWire RC30January2025 iocbottest Gi7w0rm
2025-01-24 09:41francesdomingueslora09.gleeze.com Remcosc2 remcos juroots
2025-01-23 11:10borc.gleeze.com Remcos23January2025 iocbottest Gi7w0rm
2025-01-23 11:10memoki.gleeze.com Remcos23January2025 iocbottest Gi7w0rm
2025-01-09 06:18luiscaseres.gleeze.com Remcosc2 remcos juroots
2025-01-03 04:02pentester03.gleeze.com RemcosAS132372 c2 censys GBNETWORK-AS-AP RAT remcos DonPasci
2024-12-29 09:50http://pentester03.gleeze.com:28454 Remcosc2 RemcosRAT abus3reports
2024-07-22 02:38kennyremcosbelintourismedleonline.gleeze.com RemcosRAT remcos nickkuechel
2024-06-06 23:55srvzone.gleeze.com Ave MariaAveMariaRAT c2 warzonerat Gi7w0rm
2023-12-17 19:18doradp.gleeze.com AsyncRAT Gi7w0rm
2023-09-27 18:45donald30m.gleeze.com Nanocore RATc2 historicalandnew NanoCore RAT Gi7w0rm
2023-09-27 18:40test1002.gleeze.com Nanocore RATc2 historicalandnew NanoCore RAT Gi7w0rm
2023-09-27 18:40gifted.gleeze.com Nanocore RATc2 historicalandnew NanoCore RAT Gi7w0rm
2023-09-27 18:38burningtorchinc.gleeze.com Nanocore RATc2 historicalandnew NanoCore RAT Gi7w0rm
2023-09-27 13:54stoic.gleeze.com Ave Mariac2 historicalandnew warzonerat Gi7w0rm
2023-09-27 13:54mokoolm.gleeze.com Ave Mariac2 historicalandnew warzonerat Gi7w0rm
2023-09-10 22:37softdream.gleeze.com Remcosc2 historicalandnew remcos Gi7w0rm
2023-09-10 22:37ramseycynthia.gleeze.com Remcosc2 historicalandnew remcos Gi7w0rm
2023-09-10 22:37ratagain.gleeze.com Remcosc2 historicalandnew remcos Gi7w0rm
2023-09-10 22:36houstus.gleeze.com Remcosc2 historicalandnew remcos Gi7w0rm
2023-09-10 22:36houstrik.gleeze.com Remcosc2 historicalandnew remcos Gi7w0rm
2023-09-10 22:36freeware.gleeze.com Remcosc2 historicalandnew remcos Gi7w0rm
2023-09-10 22:36shellgang.gleeze.com Remcosc2 historicalandnew remcos Gi7w0rm
2023-09-10 22:36ratagainbk.gleeze.com Remcosc2 historicalandnew remcos Gi7w0rm
2023-09-10 22:34ciber1250.gleeze.com Remcosc2 historicalandnew remcos Gi7w0rm
2023-09-10 21:55Darwin090.gleeze.com AsyncRATasyncrat c2 historicalandnew Gi7w0rm
2023-05-12 17:17horaplus.gleeze.com Mekotioc2 mekotio P4nd3m1cb0y
2023-04-10 17:12study.gleeze.com Cobalt StrikeCobaltStrike cs-watermark-391144938 drb_ra
2023-04-10 17:11https://study.gleeze.com/www/handle/doc Cobalt StrikeCobaltStrike cs-watermark-391144938 drb_ra
2023-02-09 08:07nelore.gleeze.com Mekotiomekotio abuse_ch
2022-12-20 07:22jayurbf.gleeze.com Ave MariaAveMariaRAT RAT abuse_ch
2022-09-23 21:49http://sanagosterecem6.gleeze.com AlienAlien apk myonium1
2022-09-21 20:36http://sanagosterecem1.gleeze.com/ AlienAlien apk myonium1
2022-09-21 20:36http://sanagosterecem1.gleeze.com AlienAlien apk myonium1
2022-09-17 19:32http://sanagosterecem.gleeze.com/ AlienAlien apk myonium1
2022-08-30 14:07sicoslanderfamilydog.gleeze.com Nanocore RATNanoCore RAT abuse_ch