🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


1'700

IOCs shared (past 24 hours)

Unknown Loader

Most seen malware family (past 24 hours)

1'868'876

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-11-05 14:35fcd5efaa02928c1d90172d17e7c8b46115546aa25338b708c6472488006f64ea Clientor Grim
2026-11-05 14:355121c0814867c4e86f4f350faaf6461dcfdb101d Clientor Grim
2026-11-05 14:35fbe9bdf299720f9574e5d0b585d4d642 Clientor Grim
2026-11-05 14:355d7c6a2f5171346e67236e9f4b11a873eae268fa9da744c8951474e168d44727 Clientor Grim
2026-11-05 14:35f5c1e12f4fe77602bb0e38db620cd0e4f29737ca Clientor Grim
2026-11-05 14:3599cfd282879a606bd253ae00348babe6 Clientor Grim
2026-11-05 14:35b547898a155288a53fdd5043764cef65eac7aeb1 Clientor Grim
2026-11-05 14:355dfd933d2bfde1c23e556f4a2d83613e Clientor Grim
2026-11-05 14:35ad6c822ffbe04fdf75c3daa61e02f8754a253e37158ffc888f708bfb0dd9ddd4 Clientor Grim
2026-09-12 15:3146a7ca270fdd2cb4744798f3bd5a5d65 Clientor Grim
2026-09-12 15:31b99da433d42a9ac546868b3b5fca27439a9d99d7981369e74557547be87b7542 Clientor Grim
2026-09-12 15:31bfb01f57c319d49f66653c807c62a6a7a71c63f2 Clientor Grim