ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.

555

IOCs shared (past 24 hours)

ClearFake

Most seen malware family (past 24 hours)

1'727'199

IOCs in corpus

Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

ioc:ms-debug-services.com ( run)
malware:CobaltStrike ( run)
tag:TA505 ( run)
threat_type:cc_skimming ( run)
uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)	IOC	Malware	Tags	Reporter
2022-12-28 18:02	62e9edb7e44dc3eecd59ad14f9324dff	BlackMatter		Virus_Deck
2021-11-25 18:29	8561226f674aeb4abc1b9910ddc4855ac8ac2fcd4f5face1f84e34878ac98afc	BlackMatter	blackmatter	nickkuechel
2021-11-25 18:29	bf9511517f610387d714553bed6ff59d55c21cd0aa18ae00714585e699a332a3	BlackMatter	blackmatter	nickkuechel
2021-11-25 18:29	4524784688e60313b8fefdebde441ca447c1330d90b86885fb55d099071c6ec9	BlackMatter	blackmatter	nickkuechel
2021-11-25 18:29	22d7d67c3af10b1a37f277ebabe2d1eb4fd25afbd6437d4377400e148bcc08d6	BlackMatter	blackmatter	nickkuechel
2021-11-25 18:29	7f6dd0ca03f04b64024e86a72a6d7cfab6abccc2173b85896fc4b431990a5984	BlackMatter	blackmatter	nickkuechel
2021-11-25 18:29	6155637f8b98426258f5d4321bce4104df56c7771967813d61362c2118632a7b	BlackMatter	blackmatter	nickkuechel
2021-11-25 18:29	706f3eec328e91ff7f66c8f0a2fb9b556325c153a329a2062dc85879c540839d	BlackMatter	blackmatter	nickkuechel