🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


540

IOCs shared (past 24 hours)

VShell

Most seen malware family (past 24 hours)

1'775'569

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-09-08 06:34e72b03d7ce71ec92460622726d6bc55228eb8a62d39e82d8749f45fe497ba35c TinyNuke Grim
2026-09-08 06:348183f64cc8f6bb0e31906941cb2585d263e2e484 TinyNuke Grim
2026-09-08 06:34d3a52221539ad3c09e494d95034eb992 TinyNuke Grim
2026-03-07 19:05135.148.104.56:4444 TinyNukeTinyNuke abuse_ch
2026-01-24 17:22d22d60c754eb0bd1625d28dd7efaf4ca85fc034132831e9ece586f6c67bb5989 TinyNuke Grim
2026-01-24 17:227ca2e5f229fcbfe99ae59c0ea55e95c3 TinyNuke Grim
2026-01-24 17:229fc1c04a996c7f7bbc8aeebf8fdc8971d1aead2e TinyNuke Grim
2026-01-20 00:378fca38a5b26aa4157ad169804744c4806e332fd0f7c98aa256f4ac746a63707b TinyNuke Grim
2026-01-20 00:3751d46764a122f6270b85b5007517b9e9 TinyNuke Grim
2026-01-20 00:370983a5f0829506b89aa846b2626349ac48911ee1 TinyNuke Grim
2025-05-12 02:1180363cf53ed46bafdd5267122cecc241 TinyNuke Grim
2025-05-12 02:119a6423c3c2b64ef5b4756fe5d9f648460d9ec1a4 TinyNuke Grim
2025-05-12 02:114f95ac617c436b748175dc09856e835ce7911ae9ad904b36237756e366bf727f TinyNuke Grim
2023-06-19 12:2977.105.147.140:14333 TinyNukeTinyNuke abuse_ch
2022-09-29 09:32market.contradecapital.com TinyNuke crdflabs