s2
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

Threats

153534 threats catalogued · filter, sort and triage below.

All Threats · 153534 TOTAL
All With remediations Without
Reset
ID ↕ Title ↕ Severity ↕ Category ↕ RefsRemediations Published ↕ Source updated ↕ APEX Update Time ↕
MB-757060d1a348f54c2fceeb3337e0e8b8a984d3f3001ffc27771dd49f559254e7 Unknown: msedge.exe high Unknown 1 10
MB-2b2cf3626f4d79fa2b10001f024b86677c63e2381f0923331924d26b1ee676ba Unknown: msedge.exe high Unknown 1 10
TF-1868559 ClearFake: Domain name that delivers a malware payload ghkkya.purefunsurfboards.com high ClearFake 2 10
TF-1868558 ClearFake: Domain name that delivers a malware payload purefunsurfboards.com high ClearFake 2 10
MB-ae12961097868ed2394644d506dfd40d175d30ef159def7d68a845ac23f7a9b3 Unknown: file high Unknown 1 9
MB-0aae3c635faa512b497fd34dce58b7b5fcaafcbe0a67e4c154cf7659ba334b81 CoinMiner: file high CoinMiner 1 10
TF-1868557 ClearFake: Domain name that delivers a malware payload qiybelm.razonewane.com high ClearFake 2 10
TF-1868556 ClearFake: Domain name that delivers a malware payload razonewane.com high ClearFake 2 10
TF-1868555 Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 114.132.46.254:8443 high Unknown malware 2 8
TF-1868554 Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 117.72.202.93:80 high Unknown malware 2 7
TF-1868553 Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 117.72.202.93:22 high Unknown malware 2 9
URLhaus-PL-d9b195c812e6a057025d0134eb130c871250b6bafde271eea14f277096987af0 URLhaus payload: (js) d9b195c812e6a057… medium malware 2 10
MB-2c6790b4141e5bbd9684c129acb2a7aeb1b8b3c167dfdfd6b3e9df7013bd1f4d Unknown: java-rjZsjZ.exe high Unknown 1 10
TF-1868552 Unknown malware: Domain name that delivers a malware payload roadsteriio981.icu high Unknown malware 2 10
CVE-2026-45537 OpenSIPS: Global Buffer Overflow in construct_uri critical cve 0 0
TF-1868551 Unknown malware: Domain name that delivers a malware payload vaillyharry9988.icu high Unknown malware 2 10
TF-1868550 ClearFake: Domain name that delivers a malware payload ju8teib5.natsumitapas.net high ClearFake 2 10
TF-1868549 ClearFake: Domain name that delivers a malware payload ppdrqc.pshealthcare.net high ClearFake 2 10
URLhaus-PL-b5da3130bf929b9c7a972238de7d2da0920dea3aebbed90e59cbabe153eeaeb5 URLhaus payload: (html) b5da3130bf929b9c… medium malware 2 10
TF-1868548 ClearFake: Domain name that delivers a malware payload pshealthcare.net high ClearFake 2 10
TF-1868547 ClearFake: Domain name that delivers a malware payload egybouu.qummy-group.com high ClearFake 2 10
TF-1868546 ClearFake: Domain name that delivers a malware payload qummy-group.com high ClearFake 2 10
MB-fe8277705549324d8fdb94cc7d9a9083190f3e93e8e5dfec582b5afa5d42c97d Unknown: photo_287742060718.zip high Unknown 1 10
MB-6941fbafdf1c7e5ddd12b9050c27501aba8b0ab05e1916afffd21ba30257ebf8 Unknown: pfbofa.zip high Unknown 1 10
MB-151b01ecbb7aca8b8a3e82f2e74c4f496e95046b89601a2482e6dcb3d570d78c Formbook: Q88 with vessel's particulars.exe high Formbook 1 10
MB-4cc5af32dfe739b1d73d1291dd178e4b8b76cb5b5cb4096b03d060c9236a5896 Unknown: ok high Unknown 1 9
MB-0e6518062d007026012e15e87f993f51b5338a6317c69330db4671887817a26e Prometei: 0e6518062d007026012e15e87f993f51b5338a6317c69330db4671887817a26e high Prometei 1 10
MB-a5073027d44c6ce3d7b0b8b29e4cfefb509665c4c25848e75522ebd7eb17c836 Prometei: a5073027d44c6ce3d7b0b8b29e4cfefb509665c4c25848e75522ebd7eb17c836 high Prometei 1 10
TF-1868545 Aisuru: ip:port combination that is used for botnet Command&control (C&C) 137.184.70.190:34567 high Aisuru 2 7
URLhaus-PL-4cc5af32dfe739b1d73d1291dd178e4b8b76cb5b5cb4096b03d060c9236a5896 URLhaus payload: (sh) 4cc5af32dfe739b1… medium malware 2 10
TF-1868544 Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 117.72.202.93:8888 high Unknown malware 2 7
MB-918a0a4cde273e289a846a5e21e160c2caf84372cc13c717d707458c7fd561a8 Mirai: data_arm7 high Mirai 1 10
MB-a8ae2492cac7901938e1e12b81d858b96f9b10609bda4678dfb63a0be56473e7 Mirai: data_powerpc high Mirai 1 10
MB-26d365cb80c309e42a88e0091f15a3c5de80409d18d141c83c8802e82abab22f Mirai: data_arm4 high Mirai 1 10
CVE-2026-45103 OpenSIPS: SIP Message Smuggling via TCP Content-Length Integer Overflow high cve 0 0
MB-47db897ff8ee59a7caa16b8b06e8bf45a376be9e3f581587d8fcaeda6d7d75d0 Mirai: data_arm6 high Mirai 1 10
MB-b038d9b928a355c583d0c64f5f32990e557a40117d9fa7b9c231022f540f40be Mirai: data_arm5 high Mirai 1 10
URLhaus-PL-918a0a4cde273e289a846a5e21e160c2caf84372cc13c717d707458c7fd561a8 URLhaus payload: Mirai (elf) 918a0a4cde273e28… medium Mirai 2 10
URLhaus-PL-26d365cb80c309e42a88e0091f15a3c5de80409d18d141c83c8802e82abab22f URLhaus payload: Mirai (elf) 26d365cb80c309e4… medium Mirai 2 10
URLhaus-PL-a8ae2492cac7901938e1e12b81d858b96f9b10609bda4678dfb63a0be56473e7 URLhaus payload: Mirai (elf) a8ae2492cac79019… medium Mirai 2 10
URLhaus-PL-47db897ff8ee59a7caa16b8b06e8bf45a376be9e3f581587d8fcaeda6d7d75d0 URLhaus payload: Mirai (elf) 47db897ff8ee59a7… medium Mirai 2 10
URLhaus-PL-b038d9b928a355c583d0c64f5f32990e557a40117d9fa7b9c231022f540f40be URLhaus payload: Mirai (elf) b038d9b928a355c5… medium Mirai 2 10
TF-1868543 ValleyRAT: ip:port combination that is used for botnet Command&control (C&C) 47.86.2.244:558 high ValleyRAT 3 6
TF-1868542 ClearFake: Domain name that delivers a malware payload ruqlnx.primecarelearningcenter.com high ClearFake 2 10
TF-1868541 ClearFake: Domain name that delivers a malware payload primecarelearningcenter.com high ClearFake 2 10
MB-8de2d51797f113896007d6ed8c634d99f5cee4c34c2bf55b1e4c19432afcbab3 ValleyRAT: C5940ABAE3FB2C368F0841417C9B0454.exe high ValleyRAT 1 10
TF-1868540 ValleyRAT: ip:port combination that is used for botnet Command&control (C&C) 118.107.9.185:1112 high ValleyRAT 2 6
MB-1d0b8f081975cc9dfb542c8da5d173c3a68a23531e83f07e86ccc706e56d76f3 ValleyRAT: B33A668328313F6843B1B8094BFAFFE3.exe high ValleyRAT 1 10
TF-1868539 ValleyRAT: ip:port combination that is used for botnet Command&control (C&C) 47.86.2.244:557 high ValleyRAT 2 6
MB-931ce3beac7484c2bab59eb90ee0b8230823a2f7b0dbfd6ffd4296767b0640b8 ValleyRAT: 47A4F35908F85C4A3FBE536341989D7A.dll high ValleyRAT 1 10
Showing 51–100 of 153534 threats (page 2 of 3071).