ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


478

IOCs shared (past 24 hours)

ClearFake

Most seen malware family (past 24 hours)

1'689'315

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2025-04-10 11:51x6gjpqs4jjvgpfvhghdz2dk7be34emyzluimticj5s5fexf4wa65ngad.onion HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 11:516x7dp6h3w6q3ugjv4yv5gycj3femb24kysgry5b44hhgfwc5ml5qrdad.onion HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 11:51decrypts3nln3tic.onion HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:2244c36bc55af58eb506d1760ab608402b HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:22e931ab5882d62ea08e498d90e2e11ad0 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:22a831d838a924ea135c3e0f315f73fcd3 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14a169a146571b908a412ba8482adee8f1 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1416153e9582cfe94a06fc670a5d851ed9 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14dedaf87d9f14524ec3fe7c3d2e304bf5 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14b0579ea540b639929f1a7426310d0d2c HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:141a2e261b1ae3c96b6d418dae80ce62a3 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:143167cd62ad262b8c920fc0fb258a8988 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14eafdcf0d488f08716764a0cbfdc27b46 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1488fcf84d7c9527520b770a992fbf68dd HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:141e2bf7c7cafcd1216fb12c2947536705 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:144d854853a5fab3421e5713fd0b6fed42 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14a3dc8739c25b9b0c0348fc12fddcef65 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14eab47cbf897c7e9c2dc1009e11d1d928 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:144ca68bf3d630332e9c19a17ac910376e HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14176bfe9ab5a14115ff5b90b07626cb64 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14280d680ee80e5fcc5cd6fc9be2d8518d HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14d3326491afcc35962994e391d485b3ff HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14af568e8a6060812f040f0cb0fd6f5a7b HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1483b6f9a64ac51c6623bd93918379dfc4 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14ea4ec74ecdb45e9d72ac35bd5c14e7c0 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14e7ad64df3eea1239f735f790c17db441 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14c45f5895c255c5bb59b2aa4947412753 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14d96adf82f061b1a6c80699364a1e3208 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14136bd70f7aa98f52861879d7dca03cf2 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14a64d79eba40229ae9aaebbd73938b985 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:141a79b6d169aac719c9323bc3ee4a8361 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1446ecc24ef6d20f3eaf71ff37610d57d1 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:141b0b9e4cddcbcb02affe9c8124855e58 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1457824214710bc0cdb22463571a72afd0 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1422d35005e926fe29379cb07b810a6075 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:146c849920155f48d4b4aafce0fc49eb5b HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14f568229e696c0e82abb35ec73d162d5e HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1439ea2394a6e6c39c5d7722dc996daf05 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1485cd7c6931b44a14f4899dfd0039e8b4 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14019b65ccaabcf519b65645284966db57 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:146d321248c816c61a973c9195af30b25b HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:143426341929acfd5f963d75d209337802 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:148e4a887acab5f9475c5fa9a26fb9e720 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1412df37da9db681055655bd0c73ae6716 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14a91d55cb6f5d7328a2a778c203177221 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:143342dc0e3aac48664341cd2fed82d8f0 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:147ffaaaef5bcaf94756352b1fc866ef3d HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1406ce6cd8bde756265f95fcf4eecadbe9 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14bd0802f8a9a71336607d5c9241db31d9 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1487b418a1d8eaf648b6338af20407abbb HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14e333299d9f7e4c064746e177c84bb5c8 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14ba35a80338fbf197a323f6fe960bf7cb HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:14db804c3f55c5d09dace40c76c99cab52 HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1450363f811d630e8e3ceb84f6f3db066e HelloKittyhellokitty Ransomware TheRavenFile
2025-04-10 07:1428c5c992809fecdc82509dab19c0d90a HelloKittyhellokitty Ransomware TheRavenFile