🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


1'496

IOCs shared (past 24 hours)

Unknown malware

Most seen malware family (past 24 hours)

1'868'166

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-11-08 07:27fsbrf.org SalatStealerSalatStealer stealer webrat whereyoufell
2026-11-08 07:27cazar.cc SalatStealerSalatStealer stealer webrat whereyoufell
2026-11-08 07:27morkovka.cn SalatStealerSalatStealer stealer webrat whereyoufell
2026-10-31 14:30c.ufsbrf.com SalatStealerdead-drop SalatStealer TON webrat wristhulk
2026-10-29 06:11policlinika.top SalatStealerdead-drop SalatStealer TON webrat wristhulk
2026-10-24 06:08remoteadministratortool.ton SalatStealerdead-drop SalatStealer TON webrat wristhulk
2026-10-24 06:08webratxaye1.ton SalatStealerdead-drop SalatStealer TON webrat wristhulk
2026-10-24 06:08195.208.21.65:443 SalatStealerdead-drop SalatStealer TON webrat wristhulk
2026-10-24 06:08196.196.208.18:443 SalatStealerdead-drop SalatStealer TON webrat wristhulk
2026-10-13 16:25168.222.202.171:443 SalatStealerSalatStealer TON webrat Daydream
2026-10-11 07:02salator.es SalatStealerRAT SalatStealer stealer webrat nullos
2026-10-11 07:02wruser.org SalatStealerRAT SalatStealer stealer webrat nullos
2026-10-11 07:02websalat.top SalatStealerRAT SalatStealer stealer webrat nullos
2026-10-11 07:0264.204.180.24:443 SalatStealerRAT SalatStealer stealer webrat nullos
2026-10-11 07:02109.237.98.213:443 SalatStealerSalatStealer webrat nullos
2026-10-11 07:02141.95.112.163:443 SalatStealerSalatStealer webrat nullos
2025-10-16 13:29https://websalat.top/sa1at/ SalatStealerinfostealer SalatStealer stealer webrat ninjacatcher