🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


1'765

IOCs shared (past 24 hours)

Unknown Loader

Most seen malware family (past 24 hours)

1'862'522

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-02-18 07:10422755116ab311b473dd38ec88f129d9 Interlockinterlock Ransomware TheRavenFile
2026-02-18 07:10b2b03dfcdc2e59d81e99d20c15919a13 Interlockinterlock Ransomware TheRavenFile
2026-02-18 07:109451420233168c7b0c595257d43c7b85 Interlockinterlock Ransomware TheRavenFile
2026-02-18 07:10784bc5b431fe71aaf85f7d39c014f099 Interlockinterlock Ransomware TheRavenFile
2025-06-13 06:03assets-msnmicosot-ds.live Interlockc2 interlock validin juroots
2025-06-13 06:03silverithm-dispatch.store Interlockc2 interlock validin juroots
2025-06-13 06:03windows-msn-cn.org Interlockc2 interlock validin juroots
2025-06-13 06:03assets-msn-ds.live Interlockc2 interlock validin juroots
2025-06-13 06:03teams-msg.com Interlockc2 interlock validin juroots
2025-06-13 06:03settings-datamicrosoft.live Interlockc2 interlock validin juroots
2025-06-13 06:03events-datamicrosoft.live Interlockc2 interlock validin juroots
2025-06-13 06:03orion.mysoroush.com Interlockc2 interlock validin juroots
2025-06-13 06:03payment.mysoroush.com Interlockc2 interlock validin juroots
2025-06-13 06:03events-data-microsoft.live Interlockc2 interlock validin juroots
2025-06-13 06:03grupomax-api.marcalgyn.com.br Interlockc2 interlock validin juroots
2025-06-13 06:03configedge-assets.org Interlockc2 interlock validin juroots
2025-06-13 06:03eventsdata-microsoft-live.com Interlockc2 interlock validin juroots
2025-06-13 06:03dnsg-windows-ds-data.live Interlockc2 interlock validin juroots
2025-06-13 06:03events-data-microsoft.com Interlockc2 interlock validin juroots
2025-06-13 06:03assets-msn.live Interlockc2 interlock validin juroots
2025-06-13 06:03dns-microsofts.com Interlockc2 interlock validin juroots
2025-06-13 06:03teams-msg.live Interlockc2 interlock validin juroots
2025-06-13 06:03windows-ds-time.live Interlockc2 interlock validin juroots
2025-06-13 06:03windowsds-time.live Interlockc2 interlock validin juroots
2025-06-13 06:03assets-msn-ds.org Interlockc2 interlock validin juroots
2025-06-13 06:03iarm.co.kr Interlockc2 interlock validin juroots
2025-06-13 06:03teams-msg-ns.com Interlockc2 interlock validin juroots
2025-06-13 06:03canismajor.mysoroush.com Interlockc2 interlock validin juroots
2025-06-13 06:03swiftlymeds.com Interlockc2 interlock validin juroots
2025-06-13 06:03configedge-assets.live Interlockc2 interlock validin juroots
2025-06-13 06:03dnsg-windows-ds-data.com Interlockc2 interlock validin juroots
2025-06-13 06:03events-dat-amicrosoft.live Interlockc2 interlock validin juroots
2025-06-13 06:03settings-win-data-microsoft.org Interlockc2 interlock validin juroots
2025-06-13 06:03windows-msg-as.live Interlockc2 interlock validin juroots
2025-06-13 06:03windows-msgas.org Interlockc2 interlock validin juroots
2025-06-13 06:03msgmicrosoft.com Interlockc2 interlock validin juroots
2025-06-13 06:03dng-microsof-event.org Interlockc2 interlock validin juroots
2025-06-13 06:03assetsmsn-micosot.org Interlockc2 interlock validin juroots
2025-06-13 06:03dns-gowindows-ds.org Interlockc2 interlock validin juroots
2025-06-13 06:03teamsmsg-ns.live Interlockc2 interlock validin juroots
2025-06-13 06:03windows-msg-as.org Interlockc2 interlock validin juroots
2025-06-13 06:03eventsdat-amicrosoft.live Interlockc2 interlock validin juroots
2025-06-13 06:03windows-msg-as.com Interlockc2 interlock validin juroots
2025-06-13 06:03teams-msg-microsoft.live Interlockc2 interlock validin juroots
2025-06-13 06:03dnsgowindows-ds.live Interlockc2 interlock validin juroots
2025-06-12 11:03reached-loose-cashiers-logic.trycloudflare.com Interlockc2 interlock juroots
2025-06-12 11:03config-edge-assets.live Interlockc2 interlock juroots
2025-06-12 11:03showing-bl-order-skiing.trycloudflare.com Interlockc2 interlock juroots
2025-06-12 11:03scary-halo-designing-time.trycloudflare.com Interlockc2 interlock juroots
2025-06-12 11:03ears-circus-cam-lake.trycloudflare.com Interlockc2 interlock juroots
2025-06-12 11:03never-powered-agency-hear.trycloudflare.com Interlockc2 interlock juroots
2025-05-20 06:12sublime-tragedy-counties-sculpture.trycloudflare.com Interlockc2 interlock juroots
2025-05-20 06:12hours-affected-personals-grey.trycloudflare.com Interlockc2 interlock juroots
2025-05-05 10:35faf9a658f4f9b424be3dab262a8af81c Interlockinterlock Ransomware TheRavenFile
2025-05-05 10:3533d8eabbf428fef8c5cd50b440ee3d07 Interlockinterlock Ransomware TheRavenFile
2025-05-05 10:35f73005682c1d90f4b3269483b687e891 Interlockinterlock Ransomware TheRavenFile
2025-05-05 10:353104efb23ea174ac5eda9f5fd0e8c077 Interlockinterlock Ransomware TheRavenFile
2025-03-29 17:06e11d147dad6e47a1cecb1f2755f95a55 Unknown malwareinterlock Ransomware TheRavenFile
2025-03-29 17:0623c218d4009918c9b93f22e09e1d3671 Unknown malwareinterlock Ransomware TheRavenFile
2025-03-29 17:06f76d907ca3817a8b2967790315265469 Unknown malwareinterlock Ransomware TheRavenFile
2025-03-29 17:06f7f679420671b7e18677831d4d276277 Unknown malwareinterlock Ransomware TheRavenFile
2025-03-29 17:066d034dca42ffea354a20cd15d3f2ffd5 Unknown malwareinterlock Ransomware TheRavenFile
2025-03-29 17:066c3b2558fc8cfcb2751437b6e5cdeb6f Unknown malwareinterlock Ransomware TheRavenFile