ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


557

IOCs shared (past 24 hours)

ClearFake

Most seen malware family (past 24 hours)

1'727'171

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2025-10-10 11:51gserv.mobi TemptingCedar Spywareapk d1v35h
2025-10-10 11:51chat-world.site TemptingCedar Spywareapk d1v35h
2025-10-10 11:51chat-messenger.site TemptingCedar Spywareapk d1v35h
2025-10-10 11:51network-lab.info TemptingCedar Spywareapk d1v35h
2025-10-10 11:51free-apps.us TemptingCedar Spywareapk d1v35h
2025-10-10 11:51onlineclub.info TemptingCedar Spywareapk d1v35h
2025-10-10 11:51arab-chat.site TemptingCedar Spywareapk d1v35h
2025-10-10 11:51kikstore.net TemptingCedar Spywareapk d1v35h
2021-07-02 00:07b154151dc8ace5c57f109e6bb211a019db20c4f0127c4d13c7703f730bf49276 TemptingCedar Spywarespyware Virus_Deck
2021-07-02 00:07dfe3d0e95feaed685a784aed14d087b019ba2eb0274947a840d2bdbae4ae3674 TemptingCedar Spywarespyware Virus_Deck
2021-07-02 00:07bf6083040ca51e83415f27c9412d9e3d700bd0841493b207bc96abf944ab0ca7 TemptingCedar Spywarespyware Virus_Deck
2021-07-02 00:070dcf547bd8f4074af97416d8b84ea64b2f3319064aa4bce64ad0c2e2d3957175 TemptingCedar Spywarespyware Virus_Deck
2021-07-01 21:0304c949eca23103b1de05278b49f42c3ab6b06f4bf20aafa5f2faefaa84c16ecd TemptingCedar Spywarespyware Virus_Deck
2021-07-01 21:03d6fc04acda8f33a6d35eb577c27754c2f2b4d6f4869576c7c4e11b2c5e9b0176 TemptingCedar Spywarespyware Virus_Deck
2021-07-01 21:0318c0bd4dd98008383fc52045ad896449fa7f0037593bb730ed1ef88aa547006d TemptingCedar Spywarespyware Virus_Deck
2021-07-01 21:034c9d5469e9095813418260045c2b11e499e4eaa0ffb25293f90f580c464157df TemptingCedar Spywarespyware Virus_Deck
2021-04-10 16:10101f7139930ac067a4781eada927daa6325b90f12adb6f8f4f5ccededfe9e331 TemptingCedar Spywarespyware Virus_Deck
2021-04-10 16:103ddb25bc9584e311575fab1feb2575f2a6995b71eec4a48463e220b216abfb9e TemptingCedar Spywarespyware Virus_Deck
2021-04-10 16:1023f11ac52be7eeacf60b795d266a16434e718f3fc7f555216071c48c5dedebb9 TemptingCedar Spywarespyware Virus_Deck
2021-04-10 16:10f86fceacb8455d4a0cc5d382ebd0686a7481c3dba2cdd082a20c0ee9faf6f00d TemptingCedar Spywarespyware Virus_Deck
2021-03-27 08:008308b842d9bff6ae9a342a7e67ab104e8dfe122a66bdccd8913c55df0246f751 TemptingCedar Spywarespyware Virus_Deck
2021-03-27 08:003e1d5a5f31e8a312a7f83c905d586aa4c0bfb99c2266162cf8eaf05b4ae92e7a TemptingCedar Spywarespyware Virus_Deck