s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

Threats

307727 threats catalogued · filter, sort and triage below.

All Threats · 307727 TOTAL
All With remediations Without
Reset
ID ↕ Title ↕ Severity ↕ Category ↕ RefsRemediations Published ↕ Source updated ↕ APEX Update Time ↕
TF-2020426 Unknown malware: URL that delivers a malware payload http://85.215.219.126:8765/rce_miner_install.sh high Unknown malware 2 0
TF-2020425 Unknown malware: URL that delivers a malware payload http://216.75.142.67:8090/miner_boot.sh high Unknown malware 2 0
MB-95b13fd946ea13de6f180bd964e2d7bbd68aa27eace55be21c25cef952a2dad8 Mirai: arm64 high Mirai 1 0
MB-b5c8098c5dff7eb532235a0026dabeedfd29dcb14e26464c6c7550e4db64d1af Mirai: debug.dbg high Mirai 1 0
TF-2020424 Vidar: Domain that is used for botnet Command&control (C&C) dav88.org high Vidar 2 0
TF-2020423 Vidar: Domain that is used for botnet Command&control (C&C) s.dav88.org high Vidar 2 0
TF-2020422 Vidar: Domain that is used for botnet Command&control (C&C) x.dewii.net high Vidar 2 0
TF-2020421 Vidar: Domain that is used for botnet Command&control (C&C) tn.amanplya.org high Vidar 2 0
TF-2020420 Vidar: Domain that is used for botnet Command&control (C&C) n.amarikatoto.com high Vidar 2 0
TF-2020419 Cobalt Strike: ip:port combination that is used for botnet Command&control (C&C) 49.232.220.131:22 high Cobalt Strike 2 0
TF-2020418 ClearFake: Domain name that delivers a malware payload fhsco.com.my high ClearFake 2 0
MB-2f5ba2bc8b14a1d079562a15eb49011bb30c81d504116a4609b988902c3f75a6 Unknown: dfa49d8d4dcf8c59e923badb63607636.exe high Unknown 1 0
TF-2020417 Unknown malware: Domain that is used for botnet Command&control (C&C) lourohamiv.blog high Unknown malware 3 0
TF-2020416 PureRAT: Domain that is used for botnet Command&control (C&C) octhvnjoh.duckdns.org high PureRAT 3 0
MB-f00ef379292322e9187611f4ec0c6abc612e5a65d5f7f91ceb389c5e34cd9195 Unknown: 5a726723452b91f8f17aeb8063a82782.exe high Unknown 1 0
MB-6be877166823cc75df37fe45792d71ae993bebb4680c68d10cb6c6a3b439cd29 Unknown: mips high Unknown 1 0
TF-2020415 Unknown Loader: SHA256 hash of a malware sample (payload) 057e4508e805e7218daa6f1daa058f11116fdec2a74dc865319b556ebd640e82 high Unknown Loader 2 0
TF-2020414 Unknown Loader: SHA256 hash of a malware sample (payload) b19b0bdcc8c171883229630f33d95ad49189b3aaa402c103869c20843b46e640 high Unknown Loader 2 0
TF-2020413 Unknown Loader: SHA256 hash of a malware sample (payload) b86f8878b103c994ca14bdba4586e4a5ce8fda22e4407281214bd5481743b632 high Unknown Loader 2 0
TF-2020412 Unknown Loader: SHA256 hash of a malware sample (payload) 7cc114bd86274f4266b402a1881fdb2d22cccb9d92d94186dfd7629ed6b1e39b high Unknown Loader 2 0
TF-2020411 Unknown Loader: SHA256 hash of a malware sample (payload) d9bf992ad7e94e8a810ed950148522f45ca3a68521df6bd275c9f539740268f6 high Unknown Loader 2 0
TF-2020410 Unknown Loader: SHA256 hash of a malware sample (payload) 740363a0b979cd4504857b39288ca1897256c6ed0ca280c6b0dc9e129523bef4 high Unknown Loader 2 0
TF-2020409 Unknown Loader: SHA256 hash of a malware sample (payload) 3e3a53b7016a9426cbd7e77ed22429ee2e84eb5033700a1f7c373c139e5dd26a high Unknown Loader 2 0
MB-2ec27605d8a42fea6ef86e6f8b7fd416c2ef598f5e912333c5c4c0ec14a47314 ConnectWise: Howard.ScreenConnect.ClientSetup.msi high ConnectWise 1 0
TF-2020408 Unknown RAT: Domain that is used for botnet Command&control (C&C) panel.strong-men.icu high Unknown RAT 3 0
MB-e84e0c694d9e6e72c3e932f6983f6cc3bc6e8405b3678f814a0f46d728528d71 ConnectWise: SFly2.ScreenConnect.ClientSetup.msi high ConnectWise 1 0
TF-2020407 Unknown RAT: ip:port combination that is used for botnet Command&control (C&C) 31.57.38.180:8041 high Unknown RAT 3 0
TF-2020406 Unknown RAT: Domain that is used for botnet Command&control (C&C) volt.zyvy.life high Unknown RAT 3 0
MB-47f3c8d52a9d6842eb1d5fd2ea893be9d127a9c35a5bcd5398d47fde6ebff0c4 ConnectWise: zzfa.ScreenConnect.ClientSetup.msi high ConnectWise 1 0
MB-f12e8dde651458f015d4477abc30d34f857028bb02700019a9f375b0ffdf410c Unknown: p.cmd high Unknown 1 0
MB-85e21947990155dafda7f5f42350e402c443f9851396128214d5a7ec4ae83545 SnappyClient: 1.exe high SnappyClient 1 0
MB-e3a8bac38208e1cf2a707d798eaa5a54c62509cad01bfaa0fbb4d495573f1654 RevStealer: 6eq5gvOfRvNmCi54.exe high RevStealer 1 0
MB-bbd0ecd8addc89b045dcca50bb501dec7987bc96f68b5f05e67d9ad559f6ab6f SalatStealer: CS2_Ultimate_Optimizer.bat high SalatStealer 1 0
MB-1a9c85046db6983f741c7706861c4080762ec7059df38f0522ace6f7e36cac55 SnappyClient: 1.exe high SnappyClient 1 0
MB-f7e8e61cbce426555822b337eac7560747e35b16799a4bab39abad9025464351 NanoCore: BB7D77E2E8DC5037206D16ECFBBE4983.exe high NanoCore 1 0
MB-ae7ca54128c242a0156ba3a4074ad1af43a0bccc1e58a6126bf1dfd7084da987 Unknown: stage1.cmd high Unknown 1 0
MB-d268d7cd8c346a7ac18d1dcf71e925f955ee28c76aa46c3f9e1ba0a36af845e7 Unknown: bot.exe high Unknown 1 0
TF-2020405 Quasar RAT: Domain that is used for botnet Command&control (C&C) ariktreininger.business-profiles.com high Quasar RAT 3 0
TF-2020404 StrelaStealer: Domain name that delivers a malware payload blog.brejnak.info high StrelaStealer 2 0
TF-2020403 php.shin_webshell: Domain name that delivers a malware payload frightened4634.workers.dev medium php.shin_webshell 2 0
MB-bfc5d9e0be66dfc40e74c4257b57eafa1bc53dfcd36c54ed96f5800b499e0ca3 Unknown: AWB_6482692156.xlam high Unknown 1 0
MB-2a60f3b6782215d8238b037f4912bdb56a5a4783428c36b0432682bce20e2894 Unknown: Inquiry24074032_2.doc high Unknown 1 0
MB-7a0cbdd33ff35aac6842efa4efa7fddfc32cf28d523fc7b8f511417579993540 Unknown: AKASHA SIMPLIFIED JULY.xlsm high Unknown 1 0
MB-67483a89ffbe3c9fd87b141f74c4db118e5ef18b8d85daa4e60970b80a7cdbd5 Unknown: Invoice RK25.037-11-26 IPA.doc high Unknown 1 0
MB-a0796de3b0f3b80b721a15e1b4cb523d617e53541f8a2ef00e95864c4300f710 GolstaStealer: 16ccc76a17cb2da3d715854e8729ff04.exe high GolstaStealer 1 0
MB-208551dc7286d2054ddf9729c3bf133f7c1724d14b1836976a71eb9e04969509 GolstaStealer: 09a9e1f02204554e0f2847a417c84dc3.exe high GolstaStealer 1 0
MB-0a3324a12699b9666381dcaa237c916696e0d82da972c1aa0db290a215d35857 GolstaStealer: 0b07681270570dbec050aadec8e5542b.exe high GolstaStealer 1 0
MB-c2d8487209abb5138a891f2fe562567d9dfcde2b6adbde8b1e295b3cb4b909f6 RemusStealer: 77a354a8bfc803cee1dd109a936b01b4.exe high RemusStealer 1 0
TF-2020402 Unknown malware: URL that delivers a malware payload https://cdn044us.xyz/ high Unknown malware 3 0
MB-1d48be9c03830f5749c64e7c002a02a32392892f53fa3a53d4a8664415bf30c5 RedLineStealer: A5C45448100C2A173F73D339BBEE9B47.exe high RedLineStealer 1 0
Showing 51–100 of 307727 threats (page 2 of 6155).