🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


1'709

IOCs shared (past 24 hours)

Unknown Loader

Most seen malware family (past 24 hours)

1'874'364

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-07-02 08:20laohen1.myvnc.com XWormXWorm abuse_ch
2026-06-22 11:41https://asefwe.myvnc.com Unknown malwaredead-drop-c2 polygon-deaddrop SmartLoader SmartLoader-MaaS Anonymous
2026-06-03 06:40laohe4.myvnc.com XWormXWorm abuse_ch
2026-04-14 12:11mrz.myvnc.com NjRATc2 domain njrat triage DonPasci
2026-03-06 23:02laohen29.myvnc.com XWormXWorm dyingbreeds_
2026-02-04 14:44utils.myvnc.com NjRATc2 njrat burger
2026-01-20 06:06wc-ltc.myvnc.com Quasar RATc2 domain quasar RAT triage DonPasci
2025-11-23 00:30alexisfargo425.myvnc.com Quasar RATquasar abuse_ch
2025-10-25 12:05cybergate.myvnc.com CyberGatec2 Cybergate domain RAT triage DonPasci
2025-10-14 09:29rampage.myvnc.com Revenge RAT Seclemur
2025-06-28 22:26zaman.myvnc.com NjRAT29June2025 iocbottest Gi7w0rm
2025-06-28 22:25workgroup.myvnc.com Remcos29June2025 iocbottest Gi7w0rm
2025-05-29 07:48yagorf.myvnc.com Kimsukyc2 kimsuky juroots
2025-05-29 07:48nid-navervjb.myvnc.com Kimsukyc2 kimsuky juroots
2025-05-29 07:48nid-naveruhr.myvnc.com Kimsukyc2 kimsuky juroots
2025-05-13 09:04microsofts.myvnc.com CyberGate13May2025 iocbottest Gi7w0rm
2025-04-21 10:36sie.myvnc.com DarkComet21April2025 iocbottest Gi7w0rm
2025-04-21 10:36titos.myvnc.com CyberGate21April2025 iocbottest Gi7w0rm
2025-04-10 18:28relentlesswicked.myvnc.com Remcosdropped-by-DBatLoader RAT RemcosRAT abuse_ch
2025-03-23 07:56microsoft-help.myvnc.com NjRATc2 njrat juroots
2025-03-18 13:16httpss.myvnc.com XWorm18March2025 iocbottest Gi7w0rm
2025-02-23 11:50cow.myvnc.com CyberGate23February2025 iocbottest Gi7w0rm
2025-02-17 05:23kjhgfdsaasdfgh.myvnc.com Xtreme RAT17February2025 iocbottest Gi7w0rm
2025-02-11 06:21error.myvnc.com DarkComet10February2025 iocbottest Gi7w0rm
2025-02-10 06:05adayzeven.myvnc.com CyberGate10February2025 iocbottest Gi7w0rm
2025-02-01 21:47tgm.myvnc.com CyberGate1February2025 iocbottest Gi7w0rm
2025-01-30 14:09zxrx.myvnc.com Xtreme RAT30January2025 iocbottest Gi7w0rm
2025-01-30 14:09mta.myvnc.com Xtreme RAT30January2025 iocbottest Gi7w0rm
2025-01-30 14:09googlee.myvnc.com Xtreme RAT30January2025 iocbottest Gi7w0rm
2025-01-30 14:09googie.myvnc.com Xtreme RAT30January2025 iocbottest Gi7w0rm
2025-01-30 14:09rohy.myvnc.com Xtreme RAT30January2025 iocbottest Gi7w0rm
2025-01-30 14:06googlechrome.myvnc.com SpyNote30January2025 iocbottest Gi7w0rm
2025-01-30 14:03nbg1.myvnc.com NetWire RC30January2025 iocbottest Gi7w0rm
2025-01-30 14:00vdmb.myvnc.com DarkComet30January2025 iocbottest Gi7w0rm
2025-01-25 06:00oj42315j346ng2134.myvnc.com Quasar RAT24January2025 iocbottest Gi7w0rm
2025-01-04 21:11http://confirmation.myvnc.com:5552 NjRATc2 abus3reports
2024-09-22 19:21fgwe.myvnc.com MiraiMirai Okiru zmap NDA0E
2024-06-06 23:55su8z3r0.myvnc.com Ave MariaAveMariaRAT c2 warzonerat Gi7w0rm
2024-04-18 10:36http://speedy34.myvnc.com/WZM.exe zgRATzgrat Cryptolaemus1
2024-02-25 11:49meter-ntdccompk.myvnc.com SideWinderAPT SideWinder 500mk500
2024-02-25 11:49mailsco-govpk.myvnc.com SideWinderAPT SideWinder 500mk500
2024-02-25 11:49mail-hitgovpk.myvnc.com SideWinderAPT SideWinder 500mk500
2024-02-25 11:49mail-depogovpk.myvnc.com SideWinderAPT SideWinder 500mk500
2024-02-25 11:49mail-bafmilbd.myvnc.com SideWinderAPT SideWinder 500mk500
2024-02-25 11:49mail-armylk.myvnc.com SideWinderAPT SideWinder 500mk500
2024-02-25 11:49iportal-ntdcgovpk.myvnc.com SideWinderAPT SideWinder 500mk500
2024-02-25 11:49ideaspakistan-govpk.myvnc.com SideWinderAPT SideWinder 500mk500
2024-02-25 11:49ideas2024-pakistan.myvnc.com SideWinderAPT SideWinder 500mk500
2023-12-17 21:05windows.myvnc.com CyberGate Gi7w0rm
2023-12-17 21:05thesexyone.myvnc.com CyberGate Gi7w0rm
2023-12-17 21:05spynet83.myvnc.com CyberGate Gi7w0rm
2023-12-17 21:05eazy94.myvnc.com CyberGate Gi7w0rm
2023-12-17 21:05giandiep.myvnc.com CyberGate Gi7w0rm
2023-12-17 21:05hqn.myvnc.com CyberGate Gi7w0rm
2023-12-17 21:05mafiaidol.myvnc.com CyberGate Gi7w0rm
2023-12-17 21:05skype.myvnc.com CyberGate Gi7w0rm
2023-12-17 21:05testapp.myvnc.com CyberGate Gi7w0rm
2023-12-17 16:21datastream.myvnc.com Remcos Gi7w0rm
2023-12-11 16:59runanywhere.myvnc.com Cobalt StrikeAMAZON-AES CobaltStrike cs-watermark-987654321 drb_ra
2023-11-11 12:43juliet543.myvnc.com JanelaRAT 500mk500
2023-11-11 12:43ripcurliogfa.myvnc.com JanelaRAT 500mk500
2023-11-01 09:16orionprimexgold12.myvnc.com JanelaRAT 500mk500
2023-09-27 18:40cnam.myvnc.com Nanocore RATc2 historicalandnew NanoCore RAT Gi7w0rm
2023-09-27 14:13pr0fsn1p3r.myvnc.com NjRATc2 historicalandnew njrat Gi7w0rm
2023-09-27 14:12nnew748.myvnc.com NjRATc2 historicalandnew njrat Gi7w0rm
2023-09-27 14:08nov1.myvnc.com NjRATc2 historicalandnew njrat Gi7w0rm
2023-09-27 13:53newvic.myvnc.com Ave Mariac2 historicalandnew warzonerat Gi7w0rm
2023-09-27 13:53vodahelp.myvnc.com Ave Mariac2 historicalandnew warzonerat Gi7w0rm
2023-09-20 07:35pixoneer.myvnc.com BisonalAPT TAG-74 500mk500
2023-09-20 07:34daecheol.myvnc.com BisonalAPT TAG-74 500mk500
2023-09-10 21:59jul-perl.myvnc.com AsyncRATasyncrat c2 historicalandnew Gi7w0rm
2023-09-10 20:58https.myvnc.com BitRATBitRAT c2 historicalandnew Gi7w0rm
2023-05-31 23:12mpls.myvnc.com Cobalt StrikeCobaltStrike cs-watermark-987654321 drb_ra
2023-05-31 23:12https://mpls.myvnc.com:8444/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books Cobalt StrikeCobaltStrike cs-watermark-987654321 drb_ra
2023-05-07 02:54http://mypcs.myvnc.com/IE9CompatViewList.xml Cobalt StrikeCobaltStrike cs-watermark-391144938 LDCOMNET drb_ra
2023-05-05 12:55http://mypcs.myvnc.com/updates.rss Cobalt StrikeCobaltStrike cs-watermark-391144938 LDCOMNET drb_ra
2023-05-04 09:26http://mypcs.myvnc.com/activity Cobalt StrikeCobaltStrike cs-watermark-391144938 LDCOMNET drb_ra
2023-05-02 09:09mypcs.myvnc.com Cobalt StrikeCobaltStrike cs-watermark-391144938 LDCOMNET drb_ra
2023-05-02 09:09http://mypcs.myvnc.com/ca Cobalt StrikeCobaltStrike cs-watermark-391144938 LDCOMNET drb_ra
2023-01-15 05:24immagirls.myvnc.com Oski StealerOski ViriBack abuse_ch
2022-01-25 23:313laallah.myvnc.com AsyncRATasyncrat AndreGironda
2021-12-12 19:51https://svchosts.myvnc.com/jquery-3.3.1.min.js Cobalt StrikeAMAZON-02 CobaltStrike drb_ra
2021-12-08 22:25https://svchosts.myvnc.com:10001/jquery-3.3.1.min.js Cobalt StrikeCobaltStrike MULTA-ASN1 drb_ra