ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


260

IOCs shared (past 24 hours)

ClearFake

Most seen malware family (past 24 hours)

1'693'220

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2025-06-06 06:16https://mastercardkeys.world/Pragmatical Crocodilusc2 Crocodilus URLscan juroots
2025-06-05 14:3929a472b675379a4.click Crocodilusapk Crocodilus RacWatchin8872
2025-06-05 14:3929a472b675379a4.homes Crocodilusapk Crocodilus RacWatchin8872
2025-06-05 14:3929a472b675379a4.com Crocodilusapk Crocodilus RacWatchin8872
2025-06-05 14:3929a472b675379a4.net Crocodilusapk Crocodilus RacWatchin8872
2025-06-05 14:39a9d2b15fbed0ca9.homes Crocodilusapk Crocodilus RacWatchin8872
2025-06-05 14:39a9d2b15fbed0ca9.click Crocodilusapk Crocodilus RacWatchin8872
2025-06-05 10:18http://twtliquidity.pro/Pragmatical Crocodilusc2 Crocodilus URLscan juroots
2025-06-05 10:18http://jetjetbrzil.shop/Pragmatical Crocodilusc2 Crocodilus URLscan juroots
2025-06-05 10:18http://mastercardkeys.world/Pragmatical Crocodilusc2 Crocodilus URLscan juroots
2025-06-05 05:237b6f0650b61266f4cceeb300b57980b997e8d81e522e4d00c6b5e35641250df9 CrocodilusCrocodilus gorziiii
2025-06-05 05:2365955cfb6f9fe3c3398c67ba936637e19faca3058cf0a2748b2a72e533740109 CrocodilusCrocodilus gorziiii
2025-06-05 05:23c55df59ba08f65d53695c37a712a280d944fd1b251319b7049396a77d3bc93e2 CrocodilusCrocodilus gorziiii
2025-06-05 05:2369575d53f0cb5f56293ac9f000889d2b6cb8e78411aa4b954119abe62260cdac CrocodilusCrocodilus gorziiii
2025-06-05 05:23mastercardkeys.world CrocodilusCrocodilus gorziiii
2025-06-05 05:23jetjetbrzil.shop CrocodilusCrocodilus gorziiii
2025-06-04 15:44fb046b7d0e385ba7ad15b766086cd48b4b099e612d8dd0a460da2385dd31e09e CrocodilusCrocodilus juroots
2025-06-04 15:446d55d90d021b0980528f56d040e78fa7b85a96f5c244e23f330f24c8e80c1cb2 CrocodilusCrocodilus juroots
2025-06-03 14:07Rentvillcr.homes CrocodilusCrocodilus gorziiii
2025-06-03 14:077162abdd9fd6e28.homes CrocodilusCrocodilus gorziiii
2025-06-03 14:07rentvillcr.online CrocodilusCrocodilus gorziiii
2025-06-03 14:07217.144.187.226:80 Crocodilus gorziiii
2025-06-01 07:267162abdd9fd6e28.click CrocodilusCrocodilus abuse_ch