ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


879

IOCs shared (past 24 hours)

ClearFake

Most seen malware family (past 24 hours)

1'731'468

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2023-03-10 07:40https://mtss.bol-south.org/5974/1/8682/2/0/0/0/m/files-b2dff0ca/file.rtf SideWinder mal_analysis
2023-03-10 07:385efddbdcf40ba01f1571140bad72dccb SideWinder mal_analysis
2022-12-13 19:42356f30ba570428a6d0896e3960de8b70 SideWinder Virus_Deck
2022-10-24 11:206c8ac90f16acfc0ca871f74d47ac3856 SideWinder Virus_Deck
2022-10-20 13:4957d45be439544c8ce5e1c3ff68aa84c1192e56420e476d94202443870a29536c SideWinder Virus_Deck
2022-10-20 11:5269226ff2e9a95a2dcd489679af1d8a63 SideWinder Virus_Deck
2022-09-21 02:48056d1dc3032d04d7638c02056d5146c9 SideWinder Virus_Deck
2022-09-09 10:177e461f6366681c5ae24920a31c3cfec6 SideWinder Virus_Deck