ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.

1'475

IOCs shared (past 24 hours)

Unknown Loader

Most seen malware family (past 24 hours)

1'863'152

IOCs in corpus

Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

ioc:ms-debug-services.com ( run)
malware:CobaltStrike ( run)
tag:TA505 ( run)
threat_type:cc_skimming ( run)
uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)	IOC	Malware	Tags	Reporter
2026-06-30 04:50	http://31.56.48.179:666/w	Unknown malware	container-escape credential-harvest cryptojacking cve-2026-31431 docker teampcp TeamTNT	Stateoftheattack
2026-06-30 04:50	http://31.56.48.179:666/.real_mnd	Unknown malware	container-escape credential-harvest cryptojacking cve-2026-31431 docker teampcp TeamTNT	Stateoftheattack
2026-06-30 04:50	27cc6cf232ba7ed8dc92dcb0795bdb7185197928ec3061a8d6de097f9efc5440	Unknown malware	container-escape credential-harvest cryptojacking cve-2026-31431 docker teampcp TeamTNT	Stateoftheattack
2026-06-30 04:50	http://31.56.48.179:666/.mconf	Unknown malware	container-escape credential-harvest cryptojacking cve-2026-31431 docker teampcp TeamTNT	Stateoftheattack
2026-06-30 04:50	0f63bea320d768fb12bb53a287f210b8b9ccec563ac66dc80b7967628e455566	Unknown malware	container-escape credential-harvest cryptojacking cve-2026-31431 docker teampcp TeamTNT	Stateoftheattack
2026-05-06 20:53	https://webhook.site/1d98b695-72df-4e88-885c-5efeb3df75f7	Unknown malware	teampcp	johannes
2026-04-29 09:42	scan.aquasecurtiy.org	Unknown malware	payload rogue teampcp	johannes
2026-04-25 14:39	igotnofriendsonlineorirl-imgonnakmslmao.skyhanni.cloud	Unknown malware	DoubleFantasy Gibberish LiteLLM payload teampcp telnyx	johannes
2026-04-24 08:50	https://audit.checkmarx.cx/v1/telemetry	Unknown malware	teampcp	johannes
2026-04-24 08:50	https://api.github.com/search/commits?q=beautifulcastle	Unknown malware	teampcp	johannes
2026-04-04 07:08	d761a6a7ae9f2254bd81ac234033a8b8	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:08	4ac3e3b1f0d054a4ed682a1d6a53ddb3	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:08	30767275ca828ec1c9d62baccbb0cdf1	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:08	7e521bb895d7329b7fb2b2a8736f4b19	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:08	2dbedfba5f6bf5f69b471447e4161311	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:08	b72c2be9651ede5f337926c6b5830624	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:08	98021dca558b69e93a20d912200f1782	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:08	692238a56e1941b1d92df3d8dfd513eb	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:08	aquasecurtiy.org	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:08	checkmarx.zone	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:07	models.litellm.cloud	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:07	championships-peoples-point-cassette.trycloudflare.com	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:07	investigation-launches-hearings-copying.trycloudflare.com	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:07	create-sensitivity-grad-sequence.trycloudflare.com	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:07	souls-entire-defined-routes.trycloudflare.com	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:07	plug-tab-protective-relay.trycloudflare.com	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:07	tdtqy-oyaaa-aaaae-af2dq-cai.raw.icp0.io	Unknown malware	teampcp	TheRavenFile
2026-04-04 07:07	ffxjhdp4aaucgrkh5jy5xb4f4lhwre7wqxteg27i24pfyb2uwlwxgoyd.onion	Unknown malware	teampcp	TheRavenFile
2026-03-24 07:08	b676c0703f8e4d6a198aa370ca4f5405	Unknown malware	canistorworm teampcp	TheRavenFile
2026-03-24 07:08	e8ad669f9a29983f7252ebbd40e4c4aa	Unknown malware	canistorworm teampcp	TheRavenFile
2026-03-24 07:08	4581ab19daebfd2e96962645e798b6fa	Unknown malware	canistorworm teampcp	TheRavenFile
2026-03-24 07:08	ff65f5d264b36a8eb3a6e8037d29fdcb	Unknown malware	canistorworm teampcp	TheRavenFile
2026-03-24 07:08	c48ead53448a9c62ccd1dd62e2111011	Unknown malware	canistorworm teampcp	TheRavenFile
2026-03-24 07:08	0a8cf90379e91837f87a8b7cc0d529c2	Unknown malware	canistorworm teampcp	TheRavenFile