ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


321

IOCs shared (past 24 hours)

ClearFake

Most seen malware family (past 24 hours)

1'693'300

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-02-07 19:0709f5d4d9b970c08a935a0b5b9bc26ea5 Shim RAT Grim
2026-02-07 19:077d8b6a64f7b65b281e7b5568929c6f96c62bbae9628162aabe7d8140a86d3de8 Shim RAT Grim
2026-02-07 19:07688fec9bacc20191683723aedebd3f041863f887 Shim RAT Grim
2026-01-12 00:10254a7ab72391aebcef4d33359fcfd88f Shim RAT Grim
2026-01-12 00:102787956c2a7e3723c7729ac1fe4f249a9dc194246554249c6e5526c273fb7042 Shim RAT Grim
2026-01-12 00:10fd727f02fdd6ca509307c036d0ba50f1e16394a9 Shim RAT Grim
2025-10-12 23:376d3f048d2884fe9d25b5933134f98393fad00520 Shim RAT Grim
2025-10-12 23:37879c8a15dc5b32399ca9e93bcc66f9c6 Shim RAT Grim
2025-10-12 23:3726b5e47cfa0358a4f1dedbf2c0accb4900f4d1319d493c7b1c1a45ed082d8fff Shim RAT Grim
2025-10-08 20:29ca1498ca9632613bb40e0673971fc66e Shim RAT Grim
2025-10-08 20:297cf95589f72ad91e88eb9abb8e6966394f5b89789d66b862cf1346267cf0d471 Shim RAT Grim
2025-10-08 20:29c6d11e7d9ac9a18127c45f48377f2347e9226838 Shim RAT Grim
2025-08-23 19:20241d322e38d9155141834f8e571beb35 Shim RAT Grim
2025-08-23 19:20710c10e169bc8d0bb92be5750aa7de0faf1a0cc89d64fa6c9a4e44f0c87e6479 Shim RAT Grim
2025-08-23 19:2030877320fe56906a4584600167f8dceb7b6129f9 Shim RAT Grim
2025-08-23 19:20a1c160243efd54a9bf00655966971aae Shim RAT Grim
2025-08-23 19:20cc2c9d90ffba060c9521d40776ffaa907ecec2bb Shim RAT Grim
2025-08-23 19:20512adab2c69feaf026adfb12cbd7d2eb4fee746120491e44f476eebddcbb19f2 Shim RAT Grim