🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


625

IOCs shared (past 24 hours)

Unknown malware

Most seen malware family (past 24 hours)

1'775'163

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-08-14 07:12https://dallasbackstage.com/nfront.php SatacomLegionLoader abuse_ch
2026-08-05 07:24https://shoeshowshoes.com/nfront.php SatacomLegionLoader abuse_ch
2026-08-05 07:21https://dressagelaval.com/nfront.php SatacomLegionLoader abuse_ch
2026-07-09 19:59https://littleforlot.com/nfront.php SatacomLegionLoader abuse_ch
2026-07-09 19:58littleforlot.com SatacomLegionLoader abuse_ch
2026-07-04 07:18https://eyuboglutv.com/nfront.php SatacomLegionLoader abuse_ch
2026-07-04 07:18eyuboglutv.com SatacomLegionLoader abuse_ch
2026-06-14 10:39whatdatcindy.com SatacomLegionLoader aachum
2026-06-14 10:39https://whatdatcindy.com/nfront.php SatacomLegionLoader aachum
2026-06-14 10:39g4me.flashpopdownloadbutton.monster SatacomClickFix LegionLoader aachum
2026-06-14 10:39verification-js-cdn.boats SatacomClickFix LegionLoader aachum
2026-05-22 13:32https://totebagsforwork.com/nback.php Satacomcurlygate LegionLoader Satacom andrewpetrus
2026-05-22 13:32https://totebagsforwork.com/nfront.php Satacomcurlygate LegionLoader Satacom andrewpetrus
2026-05-22 13:32https://opaqueshellsoftsmoke.monster/indexactiverevenue.php Satacomcurlygate LegionLoader Satacom andrewpetrus
2026-05-22 13:324e286cd901813a5f80411e417fb5defe25ff9af00706e68509392f6e75cc3908 Satacomcurlygate LegionLoader Satacom andrewpetrus
2026-05-22 13:32f3ef4663e909e2545d25bdd0edc7ba4f88d197760921ca23e7dededf7326aa8e Satacomcurlygate LegionLoader Satacom andrewpetrus
2026-02-22 16:09https://eroticaforfree.com/nback.php SatacomLegionLoader Satacom abuse_ch
2026-02-22 16:09https://eroticaforfree.com/nfront.php SatacomLegionLoader Satacom abuse_ch
2025-06-13 10:01https://birdeemusic.com/diagnostics.php SatacomLegionLoader abuse_ch
2025-05-22 05:49https://kastlerocke.com/diagnostics.php SatacomLegionLoader abuse_ch
2025-05-10 06:39https://cbsnaturalway.com/diagnostics.php SatacomLegionLoader abuse_ch
2025-05-08 05:02https://fmecoutsm.com/diagnostics.php SatacomLegionLoader Satacom abuse_ch
2025-05-08 05:02http://baleturn.com/front.php SatacomLegionLoader Satacom abuse_ch
2025-04-15 09:57https://redbluezone.com/diagnostics.php SatacomLegionLoader Satacom abuse_ch
2025-04-10 06:54https://korinpc.com/diagnostics.php SatacomLegionLoader abuse_ch
2025-03-31 17:52https://guildish.com/diagnostics.php SatacomLegionLoader Satacom abuse_ch
2025-03-30 08:16https://shaundoose.com/diagnostics.php SatacomLegionLoader abuse_ch
2025-03-30 08:16https://ticketvistas.com/diagnostics.php SatacomLegionLoader abuse_ch
2025-02-06 15:42http://gliempleo.com/front.php SatacomLegionLoader RobotDropper Satacom abuse_ch
2025-02-01 12:55emarketstats.com SatacomLegionLoader abuse_ch
2025-02-01 12:55http://emarketstats.com/front.php SatacomLegionLoader abuse_ch
2025-01-24 19:09kendallsuccess.com SatacomLegionLoader Satacom abuse_ch
2025-01-24 19:08http://kendallsuccess.com/front.php SatacomLegionLoader Satacom abuse_ch
2025-01-24 19:08stealthidea.monster SatacomLegionLoader Satacom abuse_ch
2025-01-24 19:08http://stealthidea.monster/front.php SatacomLegionLoader Satacom abuse_ch
2025-01-22 08:49http://vikincdesigns.com/front.php SatacomLegionLoader Satacom abuse_ch
2025-01-18 19:01flash3hit.com SatacomLegionLoader abuse_ch
2025-01-18 19:00http://flash3hit.com/front.php SatacomLegionLoader abuse_ch
2025-01-17 14:56http://low0hit.com/front.php SatacomLegionLoader abuse_ch
2025-01-12 16:27https://staticmaxepress.com/updater2.php SatacomLegionLoader Satacom abuse_ch
2025-01-07 15:41https://junewiener.com/updater2.php SatacomLegionLoader abuse_ch
2025-01-06 15:20https://palmsizehelis.com/updater2.php SatacomLegionLoader abuse_ch
2025-01-05 19:05https://caliandentistry.com/updater.php SatacomLegionLoader abuse_ch
2024-12-29 19:08http://kevinflansburg.com/updater.php SatacomLegionLoader Satacom abuse_ch
2024-12-29 08:31https://kikoschmidt.com/updater.php SatacomLegionLoader abuse_ch
2024-12-28 08:01https://ksarcftp.com/updater.php SatacomLegionLoader abuse_ch
2024-12-28 08:01ksarcftp.com SatacomLegionLoader abuse_ch
2024-12-26 12:43successroadway.com SatacomSatacom abuse_ch
2024-12-26 12:43https://successroadway.com/updater.php SatacomLegionLoader abuse_ch
2024-12-24 16:22https://trailbuddymaps.com/updater.php SatacomLegionLoader abuse_ch
2024-12-24 16:22trailbuddymaps.com SatacomLegionLoader abuse_ch
2024-12-24 07:31denimcard.com SatacomLegionLoader abuse_ch
2024-12-24 07:30https://denimcard.com/updater.php SatacomLegionLoader abuse_ch
2024-12-23 20:38https://maddhouzz.com/updater.php SatacomLegionLoader abuse_ch
2024-12-23 20:35maddhouzz.com SatacomLegionLoader abuse_ch
2024-12-13 18:11platiindustries.com SatacomLegionLoader RobotDropper NDA0E
2024-12-13 18:10https://platiindustries.com/licenseUser.php SatacomLegionLoader RobotDropper NDA0E
2024-12-11 06:37key-pack.com SatacomLegionLoader Satacom abuse_ch
2024-12-11 06:37key-keys.com SatacomLegionLoader Satacom abuse_ch
2024-12-11 06:37key-license1.com SatacomLegionLoader Satacom abuse_ch
2024-12-10 05:45https://cococokeys.com/licenseUser.php SatacomLegionLoader Satacom abuse_ch
2024-12-10 05:4566.63.187.205:443 SatacomLegionLoader Satacom abuse_ch
2024-12-10 05:43cococokeys.com SatacomLegionLoader Satacom abuse_ch
2024-12-08 16:42puta-key.com SatacomLegionLoader Satacom abuse_ch
2024-12-08 16:42https://puta-key.com/licenseUser.php SatacomLegionLoader Satacom abuse_ch
2024-12-08 16:41safemangoapp.monster SatacomLegionLoader Satacom abuse_ch
2024-12-08 07:59taco-keys.com SatacomLegionLoader Satacom abuse_ch
2024-12-08 07:59https://taco-keys.com/licenseUser.php SatacomLegionLoader Satacom abuse_ch
2024-12-08 07:58trinerblogcastfeedtool.com SatacomLegionLoader Satacom abuse_ch
2024-12-06 15:54search-keys.com SatacomLegionLoader Satacom abuse_ch
2024-12-06 15:52innosettagpathyakidoo.com SatacomLegionLoader Satacom abuse_ch
2024-12-02 15:23software-license1.com SatacomLegionLoader licenseserver Gi7w0rm
2024-12-02 15:21gay-domain.com SatacomLegionLoader licenseserver Gi7w0rm
2024-12-02 15:21get-license4.com SatacomLegionLoader licenseserver Gi7w0rm
2024-12-02 15:21get-license2.com SatacomLegionLoader licenseserver Gi7w0rm
2024-12-02 15:20to-license2.com SatacomLegionLoader licenseserver Gi7w0rm
2024-12-02 15:20get-license12.com SatacomLegionLoader licenseserver Gi7w0rm