🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


1'498

IOCs shared (past 24 hours)

Unknown Loader

Most seen malware family (past 24 hours)

1'860'844

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-07-21 22:25141.11.243.110:60401 AdWindAdwind abuse_ch
2026-02-18 09:05158.94.209.22:35541 AdWindAdwind abuse_ch
2026-02-07 07:25213.152.162.116:5812 AdWindAdwind java Neiki
2026-01-27 17:36193.161.193.99:3397 AdWindAdwind AS198134 c2 GETWIFI-AS triage DonPasci
2025-03-27 15:45667d24d659242b95fd7a1c8d1738b1272e0b76aac68c07f97e4e9d2d737db627 AdWindAdwind Anonymous
2024-09-23 21:0580.85.154.91:6600 AdWindAdwind abuse_ch
2024-07-25 03:1046.183.223.47:7777 AdWindAdwind abuse_ch
2024-04-17 04:30pnauco5.ddns.net AdWind NDA0
2024-04-16 16:10103.151.123.225:5000 AdWindAdwind abuse_ch
2024-03-19 23:3546.183.222.88:22288 AdWindAdwind abuse_ch
2024-02-28 13:4546.183.223.64:22364 AdWindAdwind abuse_ch
2024-02-28 02:55155.94.211.9:42119 AdWindAdwind abuse_ch
2024-02-26 17:25204.44.127.146:20188 AdWindAdwind abuse_ch
2023-09-07 05:5589.117.74.176:2626 AdWind 500mk500
2023-09-07 05:5589.117.74.176:9090 AdWind 500mk500
2023-09-07 05:5589.117.74.176:8081 AdWind 500mk500
2023-08-04 17:16rat19.duckdns.org AdWindAdwind RAT g0njxa
2023-08-04 17:1623.26.248.208:2222 AdWindAdwind RAT g0njxa
2023-05-11 05:4278.142.18.221:441 AdWindAdwind RAT abuse_ch
2023-03-28 14:20103.187.4.71:1990 AdWindAdwind abuse_ch
2022-12-04 18:25194.180.48.197:8123 AdWindAdwind abuse_ch
2022-11-18 03:0043.226.229.92:72 AdWindAdwind abuse_ch
2022-11-09 11:26185.222.58.110:1780 AdWindAdwind abuse_ch
2022-11-07 11:20109.206.243.106:1605 AdWindAdwind abuse_ch
2022-10-20 04:0837.0.14.215:5200 AdWindAdwind abuse_ch
2022-10-17 10:2045.138.16.101:1900 AdWindAdwind abuse_ch
2022-09-26 08:3579.134.225.77:6020 AdWindAdwind abuse_ch
2022-09-21 23:5545.74.38.17:5000 AdWindAdwind abuse_ch
2022-09-21 13:1223.105.131.204:2828 AdWindAdwind abuse_ch
2022-09-05 23:30185.222.58.76:2023 AdWindAdwind abuse_ch
2022-09-05 09:3579.110.62.95:2023 AdWindAdwind abuse_ch
2022-09-03 10:50107.182.129.86:2023 AdWindAdwind abuse_ch
2022-09-02 13:1579.134.225.10:2022 AdWindAdwind abuse_ch
2022-09-02 06:40202.55.132.51:2256 AdWindAdwind abuse_ch
2022-09-01 06:20202.55.132.51:2245 AdWindAdwind abuse_ch
2022-08-30 08:0684.38.129.32:33160 AdWindAdwind abuse_ch
2022-08-24 07:1046.183.220.114:44147 AdWindAdwind abuse_ch
2022-08-20 07:04ianticrish.tk AdWindAdwind geo RAT TUR abuse_ch
2022-08-20 07:04192.236.198.236:1506 AdWindAdwind geo RAT TUR abuse_ch
2022-08-20 07:04192.236.198.236:1505 AdWindAdwind geo RAT TUR abuse_ch
2022-08-09 06:35185.222.58.242:1781 AdWindAdwind abuse_ch
2022-05-14 23:45c3ea3ac0e09ae046261d51bd21e71c8c AdWind Virus_Deck
2022-03-02 17:21185.19.85.175:7412 AdWindAdwind abuse_ch
2022-02-10 10:51172.111.141.63:5888 AdWindAdwind abuse_ch
2022-02-02 08:12139.28.37.109:5200 AdWindAdwind abuse_ch
2022-01-06 07:4543affdaf791ae623b1bcafa5c1d9a293b778b178c8fd9801379e055b4f09eb75 AdWind Virus_Deck
2022-01-06 07:45a7872e2925ebf6f9b7a1992721d94ea74c9ac7ca2c9f24d2228c290616752410 AdWind Virus_Deck
2022-01-06 07:452251baa4e2ad666c402aa52de5a42a9e87f284b0033cbf8ecb08e957bd54a9bf AdWind Virus_Deck
2022-01-06 07:45b4bb442b04053e01e444cd22081854f871f893fdd91ca197664b2499a76b25bb AdWind Virus_Deck
2021-12-16 08:21185.19.85.160:9641 AdWindAdwind abuse_ch
2021-12-10 11:07194.5.98.52:1407 AdWindAdwind abuse_ch
2021-10-28 06:26141.101.134.51:7896 AdWindAdwind abuse_ch
2021-10-23 18:45141.101.134.39:7896 AdWindAdwind abuse_ch
2021-09-09 10:20178.170.138.163:1983 AdWindAdwind abuse_ch
2021-09-06 22:11109.248.144.177:1947 AdWindAdwind abuse_ch
2021-09-06 22:0566.154.111.3:1993 AdWindAdwind abuse_ch
2021-08-30 14:36172.93.187.66:19844 AdWindAdwind abuse_ch
2021-08-23 17:45185.106.123.201:702 AdWindAdwind abuse_ch
2021-07-06 08:10194.5.98.5:1604 AdWindAdwind abuse_ch
2021-07-02 05:5545.147.231.41:5001 AdWindAdwind abuse_ch
2021-06-22 13:3586bc35cf8621fc75d1c5f8256899e91ff39304e14446b25f7dd34943fd497e70 AdWindAdwind Virus_Deck
2021-06-22 13:35948c559d4804d44f7585e2d05029c94b9f46b52c7e7c035f5289129c828533a1 AdWindAdwind Virus_Deck
2021-06-22 13:35f5673f2290ad72c69b5efe4f1b96a76239b3286a536db8b2e26e9544274472a4 AdWindAdwind Virus_Deck
2021-06-10 12:06185.244.26.223:7551 AdWindAdwind abuse_ch
2021-06-08 22:3379.134.225.69:7551 AdWindAdwind abuse_ch
2021-05-03 00:25185.140.53.137:5000 AdWindAdwind abuse_ch
2021-04-30 06:4079.134.225.10:5000 AdWindAdwind abuse_ch
2021-04-19 21:15107.175.101.209:7865 AdWindAdwind abuse_ch
2021-04-06 13:13a6be5be2d16a24430c795faa7ab7cc7826ed24d6d4bc74ad33da5c2ed0c793d0 AdWindAdwind Virus_Deck
2021-04-06 13:139da575dd2d5b7c1e9bab8b51a16cde457b3371c6dcdb0537356cf1497fa868f6 AdWindAdwind Virus_Deck
2021-03-29 20:10201.212.118.175:444 AdWindAdwind abuse_ch
2021-03-26 10:50185.222.57.238:7788 AdWindAdwind abuse_ch