🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


3'029

IOCs shared (past 24 hours)

AsyncRAT

Most seen malware family (past 24 hours)

1'767'407

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-09-09 23:32efm-global.com Unknown StealerEvilToken phishing varysz
2026-08-26 21:54vitoria-global.com IClickFixClearFake ClickFix skocherhan
2026-08-25 16:41k-global.com.vn IClickFixClickFix etherhiding varysz
2026-08-08 09:04wipe-global.com ClearFakecompromised etherhide Anonymous
2026-06-17 04:42vanguard-bridge-global.com Unknown StealerClickFix varysz
2026-05-25 07:19torrrj.highlife-global.com ClearFakeClearFake Anonymous
2026-05-25 07:16xrwunf.highlife-global.com ClearFakeClearFake threatcat_ch
2026-05-12 14:57sina-global.com VidarClickFix compromised etherhiding Polygon Vidar WordPress varysz
2026-04-14 11:35https://univer-global.com/ VidarClickFix compromised etherhiding Polygon Vidar WordPress Anonymous
2026-04-14 11:34https://arevic-global.com/ VidarClickFix compromised etherhiding Polygon Vidar WordPress Anonymous
2026-02-23 07:17dise-global.com IClickFixClickFix TheRavenFile
2025-12-08 19:00teo-global.com Unknown Stealercensys ClickFix DaveLikesMalwre
2025-11-25 17:42dise-global.com Unknown malwareClickFix HuntYethHounds
2025-11-25 17:42https://dise-global.com Unknown malwareClickFix HuntYethHounds
2024-10-10 06:19avatrade-global.com Lumma StealerAvaTrade Lumma DaveLikesMalwre
2023-05-30 21:04https://sdk-global.com/ntor/?1 QakBotBB30 js QakBot qbot Quakbot zip Cryptolaemus1
2023-05-10 17:24https://sdk-global.com/niid/ QakBotBB27 js QakBot qbot Quakbot TR Cryptolaemus1
2023-04-19 16:18http://crmus.initor-global.com/wicd/sister.zip QakBotobama254 QakBot qbot Quakbot WSF zip Cryptolaemus1
2022-12-22 20:05https://tags-global.com/NU.php QakBotB1 BB11 iso QakBot qbot Quakbot TR U22 zip Cryptolaemus1
2022-03-04 16:47http://meca-global.com/wp-admin/zpM6L8KXY0H/ Emotetdll emotet epoch5 proxylife
2021-08-27 15:48https://fedex-global.com:443/MicrosoftUpdate/ShellEx/KB242742/default.aspx Cobalt StrikeCobaltStrike NexusFuzzy