🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


1'623

IOCs shared (past 24 hours)

Vidar

Most seen malware family (past 24 hours)

1'824'004

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-10-04 04:46adef929e7c44596ed1cb4c1300826874fc48d6adc9edde45f0cfa45e9792ef42 Akiraakira elf whack_sh
2026-10-03 12:465f73fd2184ffc262f1bdac74b8f15c589f8d5cf986625ff687ecd32928241f80 Akiraakira elf Ransomware whack_sh
2026-06-20 16:0576b7d33401d60a564d8761c3b31a061ad3e8c64579cdcfb81cce92b55f491c3c Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:055f72bdb14e138f10c1658248fdaf10db2fd1e812240966e009bbcf8d463e099c Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:05300bc2769c6d62ba9d228cc45e126cd458e1a23fd23092da258053afd82f2755 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:05f25b7f11e9f34ee5d91b3e07ba22925022e8b8b05c3ddf6672ae86e5144481cf Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:053999a25f8f0fd8252aa9250fa9bd70aae202f181812cc6c230c8ea2842340f18 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:053dc7d4023c7380ed740ac5ac7d82a4ba6f587f430b2b7b66f1d34a44f89c39cb Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:056a5e547756ef1256f1eb9df0249245c35461affd009be8f046559bc007cafcf2 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:051bc4c339b1c0773a649234d4b85dd1929c0b5d2d0cd9836c7ad1d7491372f9ec Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:05718d6f185fdc2d9fd206914c2b05f85e3c50b53c705071c09cebdf44cff34768 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:05722360b213bc17885dcd6894a07d9a8be342b240d7d41e0490e50964f63aa239 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:057454191be1a95519697a68bdce4a90fec5aadcfe0871d8537135e2af5de8de8c Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:05acfe720d95e1adfedc4869e89930644cbd17635c121b43698bf66ff1d14e5746 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:05f7010e50cc72851a99f686370ac0b5bf75c81cc00e809b4e7937a8d6e60114db Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:054b7779b386a7efee91f70008f7d7f773e9b787a374c8c974fd450ce3cb642398 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:05b5dfd4fb5e17d304c15d42a1d2404ff7a578b618f996f5cb6b2762cd9a6d0c53 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:052e0b923cbbf6f655fbac594d100421787f03c39bea97c702b1ddf91c19b3e1c7 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:0536131ab94a019b67a88fa167f8e8e48d2ac20a27f2cef6a7c49ce2b102c8cf66 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:05e3744b3c8520e462e419b1d63b6474a0c45ae5eb561e66c1d924b00503336533 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:05a6ee7327cc2efe51abd32ac04d601bec931c4dbb91236755882aed715656fb3d Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:059c8b81f82d5870e12062c9c2b31391f79d51dacbb15b15178d6759cbf6b4cadb Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:057d408096bc0b679103c8a9c7d2460d5bebf13a8630e2fdbd5a4953f78c26874a Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:05b534ab6313858e92a929eaf85a255382b894e8d2bc01c470994ad88ef915ca12 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:0581c36830ea8e0df4de2e4e7040c551a8b7aeac4dc847268d144adcb2ead49ec1 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:05fc7a155c2a563ef21beedb7c1ac1bf2f0488b80b337f986229e126b0a312a5da Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:058b5a2462019b8faa9dfc06b21d10706718480b9488dbebf12d021980e0c646fe Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:059f97d8732ccafdfd352d4da4501d4ce9e6e10c3112f3d10c437543c3ef578fd2 Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:058248b493de0c1c6415afecb34bb344b21dc467b026a6381687ad82a2a8938f2e Akiraakira elf Ransomware TheRavenFile
2026-06-20 16:05ef41ea6b089e5a12ce4ae339a5c131349fd89509ce595c781b7c94baf91731ab Akiraakira elf Ransomware TheRavenFile
2025-05-31 09:242fb9ccecabed10cd8f9f77d77a30e998 Akiraakira Ransomware TheRavenFile
2025-05-31 09:240e8c4d7dba3c9d20a70c529adc003ce2 Akiraakira Ransomware TheRavenFile
2025-05-31 09:24d2b2a35d0e85409379b7a61a441de709 Akiraakira Ransomware TheRavenFile
2025-05-31 09:24799e1b6ad59324054e74eb6bfe5f78f9 Akiraakira Ransomware TheRavenFile
2025-05-31 09:24f91cf21c1415ef1a90cff56e7dc7e88c Akiraakira Ransomware TheRavenFile
2025-05-31 09:243bb1c26086562c4c3a6cf59954faeb30 Akiraakira Ransomware TheRavenFile
2025-05-31 09:24d23c85d858eb9c90a5de9901c2db75c7 Akiraakira Ransomware TheRavenFile
2025-05-31 09:249f43ea23f078264bdbc2b8fbd46ba6d4 Akiraakira Ransomware TheRavenFile
2025-05-31 09:2465960a16c117030401992050ce836dfb Akiraakira Ransomware TheRavenFile
2025-03-26 11:291ae94a7f35590456e535130a6febe2b7 Akiraakira Ransomware TheRavenFile
2025-02-05 06:42604ea52ac70d5189504788be828d1589 Akiraakira Ransomware TheRavenFile