ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


233

IOCs shared (past 24 hours)

ClearFake

Most seen malware family (past 24 hours)

1'692'516

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2025-02-10 06:04dfd6177cd181f2c8cd9b2bd088a192ba Clopcl0p clop Ransomware TheRavenFile
2025-02-10 06:04e56c567b260434bc40dc30f0e313740b Clopcl0p clop Ransomware TheRavenFile
2025-02-10 06:04bd9bd8458467afd9736f0cc1c6629cb2 Clopcl0p clop Ransomware TheRavenFile
2025-02-10 06:0475804319cddfb798b3859cb757296f6e Clopcl0p clop Ransomware TheRavenFile
2025-02-10 06:04ab81d6da3d9d849779d3b821e02e8b2d Clopcl0p clop Ransomware TheRavenFile
2025-02-10 06:040148e5b17e6ace84c62e37eb3e933440 Clopcl0p clop Ransomware TheRavenFile
2025-02-10 06:04c8b18c3b74381d1c7ffceb46c14270da Clopcl0p clop Ransomware TheRavenFile
2025-02-10 06:046eefc88ee224f3e787c54a462cb89d27 Clopcl0p clop Ransomware TheRavenFile
2025-02-10 06:049246b822f94eb24b49bac245153c7fdb Clopcl0p clop Ransomware TheRavenFile
2025-02-10 06:04a8cc764e7c7a62a0fc26bbe3df31daa6 Clopcl0p clop Ransomware TheRavenFile
2025-02-10 06:04a04eb443870896fbe9a0b6468c4844f7 Clopcl0p clop Ransomware TheRavenFile
2025-02-10 06:048752a7a052ba75239b86b0da1d483dd7 Clopcl0p clop Ransomware TheRavenFile
2025-02-10 06:04772f351c8b05b3e079072449f2696f91 Clopcl0p clop Ransomware TheRavenFile
2023-03-23 18:12afe7f87478ba6dfca15839f958e9b2ef ClopAnonymous
2023-03-23 18:124431b6302b7d5b1098a61469bdfca982 ClopAnonymous
2023-03-23 18:125e52f75d17c80dd104ce0da05fdfc362 ClopAnonymous
2023-03-23 18:12dd5cee48cdd586045c5fb059a1120e15 ClopAnonymous
2023-03-23 18:128bd774fbc6f846992abda69ddabc3fb7 ClopAnonymous
2023-03-23 18:12f59d2a3c925f331aae7437dd7ac1a7c8 ClopAnonymous
2023-03-23 18:1231e0439e6ef1dd29c0db6d96bac59446 ClopAnonymous
2023-03-23 18:0977ea0fd635a37194efc1f3e0f5012a4704992b0e ClopAnonymous
2023-03-23 18:09ac71b646b0237b487c08478736b58f208a98eebf ClopAnonymous
2023-03-23 18:09a6e940b1bd92864b742fbd5ed9b2ef763d788ea7 ClopAnonymous
2023-03-23 18:09a1a628cca993f9455d22ca2c248ddca7e743683e ClopAnonymous
2023-03-23 18:094fa2b95b7cde72ff81554cfbddc31bbf77530d4d ClopAnonymous
2023-03-23 18:0940b7b386c2c6944a6571c6dcfb23aaae026e8e82 ClopAnonymous
2023-03-23 18:08ba5c5b5cbd6abdf64131722240703fb585ee8b56 ClopAnonymous
2023-03-23 18:0846b02cc186b85e11c3d59790c3a0bfd2ae1f82a5 ClopAnonymous