Authenticate for API access | If you are experiencing issues with receiving data from abuse.ch platforms via API, please ensure your requests are authenticated.
➡️ Read here for more info

ThreatFox Database

Indicators of Compromise (IOCs) on ThreatFox are associated with a certain malware fas. A malware sample can be associated with only one malware family. The page below gives you an overview on indicators of compromise associated with win.kimsuky.

You can also get this data through the ThreatFox API.

Database Entry


Malware: Kimsuky
First seen:2021-03-09 12:47:48 UTC
Last seen:2025-07-03 06:11:35 UTC
Number of IOCs:441
Malpedia: https://malpedia.caad.fkie.fraunhofer.de/details/win.kimsuky

Indicators Of Compromise


The table below shows all indicators of compromise (IOCs) that are associated with this particulare malware family (max 1000).