MB-97a32fe0056625fed452241b117355332a0e81ea94c99580a858a2b0437e81bd |
Unknown: lel.sh |
high |
Unknown |
1 |
10 |
|
|
|
MB-7d182c5049df9052614181fc9d42aa2851e293686c6c329df336f0655bcc7ce8 |
Unknown: new.txt |
high |
Unknown |
1 |
10 |
|
|
|
MB-2c07141082292e2c9a2e7b6d9971e2052cb073a3bf0e97873234fa2b05354c5f |
Mirai: mips |
high |
Mirai |
1 |
10 |
|
|
|
MB-4286f0636d1caf63ca7638da8ef37ac7a2cdbda7e685acdacdb931c83b68f562 |
Mirai: stub.amd64 |
high |
Mirai |
1 |
10 |
|
|
|
MB-cc73561480591baee4c47ce8b44cf37e22a326f9f2ccb8cce224407fcb0c0044 |
Unknown: 004911_MT103_001_rejection_000223346.exe |
high |
Unknown |
1 |
10 |
|
|
|
MB-cf869324cbadaa2bc186f2d1d1bda3718329c1000e60e22a29a3a1f207c465ae |
Unknown: cf869324cbadaa2bc186f2d1d1bda3718329c1000e60e22a29a3a1f207c465ae.bin |
high |
Unknown |
1 |
10 |
|
|
|
MB-2aabae20e3321ad0e102a7a3fcf546115a310710110712dad7b43127fa0eb6b0 |
Mirai: 2aabae20e3321ad0e102a7a3fcf546115a310710110712dad7b43127fa0eb6b0.elf |
high |
Mirai |
1 |
10 |
|
|
|
MB-77c6b911d5f14e8c46e357aa6257ac70ad142fe86ab34f235b3d245a576d0c59 |
Unknown: Quote8940384.JS |
high |
Unknown |
1 |
9 |
|
|
|
CVE-2026-62062 |
WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability |
high |
cve |
0 |
0 |
|
|
|
TF-1932517 |
Mozi: URL that delivers a malware payload http://59.103.106.211:60515/Mozi.m |
high |
Mozi |
3 |
10 |
|
|
|
TF-1932515 |
Mozi: URL that delivers a malware payload http://223.123.73.173:35250/Mozi.a |
high |
Mozi |
3 |
10 |
|
|
|
TF-1932516 |
Mozi: URL that delivers a malware payload http://124.29.194.194:43904/Mozi.7 |
high |
Mozi |
3 |
10 |
|
|
|
TF-1932553 |
SnappyClient: URL that delivers a malware payload https://leebin101.com/ |
high |
SnappyClient |
3 |
10 |
|
|
|
TF-1932545 |
Cobalt Strike: ip:port combination that is used for botnet Command&control (C&C) 47.94.56.71:8443 |
medium |
Cobalt Strike |
2 |
5 |
|
|
|
TF-1932574 |
Remus: ip:port combination that is used for botnet Command&control (C&C) 168.231.121.175:5263 |
high |
Remus |
3 |
6 |
|
|
|
TF-1932555 |
SnappyClient: URL that delivers a malware payload https://leebin101.com/g.php |
high |
SnappyClient |
3 |
10 |
|
|
|
TF-1932554 |
SnappyClient: URL that delivers a malware payload https://leebin101.com/r |
high |
SnappyClient |
3 |
10 |
|
|
|
TF-1932575 |
Remus: Domain that is used for botnet Command&control (C&C) bdducts.click |
high |
Remus |
3 |
10 |
|
|
|
TF-1932577 |
SnappyClient: Domain name that delivers a malware payload leebin101.com |
high |
SnappyClient |
2 |
10 |
|
|
|
TF-1932656 |
Mirai: SHA256 hash of a malware sample (payload) 6c944e11383fe04397727893aeb668d8b7989bdf9510e5bc283dbfb9fccd6f05 |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932655 |
Mirai: SHA256 hash of a malware sample (payload) 494aec19883cb5454d5d8e84953ceed65b83af99ff8a9cbf049544105e2b5e18 |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932671 |
Unknown Loader: URL that delivers a malware payload https://lucciodontologiaintegrada.com.br/16/zong.ps1 |
medium |
Unknown Loader |
2 |
10 |
|
|
|
TF-1932677 |
Remcos: ip:port combination that is used for botnet Command&control (C&C) 172.111.163.171:65070 |
high |
Remcos |
2 |
7 |
|
|
|
TF-1932678 |
ClearFake: Domain that is used for botnet Command&control (C&C) cup.blinqueofficial.com |
high |
ClearFake |
2 |
10 |
|
|
|
TF-1932693 |
php.shin_webshell: Domain that is used for botnet Command&control (C&C) fanulisi.workers.dev |
medium |
php.shin_webshell |
2 |
10 |
|
|
|
URLhaus-PL-2aabae20e3321ad0e102a7a3fcf546115a310710110712dad7b43127fa0eb6b0 |
URLhaus payload: Mirai (elf) 2aabae20e3321ad0… |
medium |
Mirai |
2 |
10 |
|
|
|
URLhaus-PL-fa4d5d28f34cebfedaae4ef2145f5da5b2b159d9b53609e52a3047ad24b5a2c7 |
URLhaus payload: (exe) fa4d5d28f34cebfe… |
medium |
malware |
2 |
10 |
|
|
|
MB-857fb26db0db2ff72f9e2cf8d17aed5dc3734c64735509b8bd818d8fd9192caf |
Mirai: i686 |
high |
Mirai |
1 |
10 |
|
|
|
MB-f91219fb17926a2c11b9ce519b678246e1da8673faed2c7240de9c87112b353f |
Mirai: bot.armv7 |
high |
Mirai |
1 |
10 |
|
|
|
MB-cbd28004f1a8e99687d9a3ece9762a4d6b88d65e66a987e5d2e10caef99d97d2 |
Mirai: bot.amd64 |
high |
Mirai |
1 |
10 |
|
|
|
MB-3a1080a06a45c3c9c5b8f6b0d1eaf9dbe573fb62ed9629bea0d3d4e9783cc25a |
Mirai: bot.armv5l |
high |
Mirai |
1 |
10 |
|
|
|
MB-89a77d3ab866c1175a871b7d1a7427ceb9c1a631e1bdede1196b0f04f5cd29b8 |
Mirai: i586 |
high |
Mirai |
1 |
10 |
|
|
|
MB-4073e8a1f8e46cf8790bffb7065acf792600bed4c10cb493eb34fe235cf747c4 |
Mirai: stub.mpsl |
high |
Mirai |
1 |
10 |
|
|
|
MB-53003e8ffa9ba86afce9e2f2fb14d8f6cd5dc25eb9a260e98b60646a098310b9 |
Mirai: arc |
high |
Mirai |
1 |
10 |
|
|
|
URLhaus-PL-2af2d82ac1b143dc3858f394d64142b313190a8a8bf3ab5c4398c8746a700ec5 |
URLhaus payload: OverlordRAT (exe) 2af2d82ac1b143dc… |
medium |
OverlordRAT |
2 |
10 |
|
|
|
URLhaus-PL-cf869324cbadaa2bc186f2d1d1bda3718329c1000e60e22a29a3a1f207c465ae |
URLhaus payload: (zip) cf869324cbadaa2b… |
medium |
malware |
2 |
10 |
|
|
|
URLhaus-PL-2ee305f83ecf25b4bbb189ae3393cd24824750f2635fc3f39e4f37f0e1e0bd21 |
URLhaus payload: (zip) 2ee305f83ecf25b4… |
medium |
malware |
2 |
10 |
|
|
|
URLhaus-PL-ca7339c4a1cb94be338a91f67568a9ad466c60e49b5369988ee1b3643f31e3ec |
URLhaus payload: OverlordRAT (exe) ca7339c4a1cb94be… |
medium |
OverlordRAT |
2 |
10 |
|
|
|
URLhaus-PL-014e4bcf91b05252323a3eaa0819c8991e6ba183809644ec6371a7292c32fc4e |
URLhaus payload: (zip) 014e4bcf91b05252… |
medium |
malware |
2 |
10 |
|
|
|
URLhaus-PL-42184f8f01e02c0df7f7f7e3b7e3db44eeb195b2c140f91e636498ea7b275f4a |
URLhaus payload: (zip) 42184f8f01e02c0d… |
medium |
malware |
2 |
10 |
|
|
|
URLhaus-PL-97a32fe0056625fed452241b117355332a0e81ea94c99580a858a2b0437e81bd |
URLhaus payload: (sh) 97a32fe0056625fe… |
medium |
malware |
2 |
10 |
|
|
|
URLhaus-PL-d3e5d5e5289c2e39e12dc91a4e286faf64812bf68c83c1f37e88b2fac79d105c |
URLhaus payload: RustyStealer (exe) d3e5d5e5289c2e39… |
medium |
RustyStealer |
2 |
10 |
|
|
|
URLhaus-PL-a00ac92ec98b6c60ae4816b9ce514b88efdd2299e9ef5be28fcf52d82a0cbe88 |
URLhaus payload: (zip) a00ac92ec98b6c60… |
medium |
malware |
2 |
10 |
|
|
|
URLhaus-PL-842ca3d0dc8a7254527909d61f4cec1f32a33567e2d83c33ed0610409db63919 |
URLhaus payload: (zip) 842ca3d0dc8a7254… |
medium |
malware |
2 |
10 |
|
|
|
URLhaus-PL-dea10c923a8be49062bb4a58c23bd55a19bf603da1661f8df50b5d7150a0a03d |
URLhaus payload: Mirai (elf) dea10c923a8be490… |
medium |
Mirai |
2 |
10 |
|
|
|
URLhaus-PL-7d182c5049df9052614181fc9d42aa2851e293686c6c329df336f0655bcc7ce8 |
URLhaus payload: (elf) 7d182c5049df9052… |
medium |
malware |
2 |
10 |
|
|
|
URLhaus-PL-2c07141082292e2c9a2e7b6d9971e2052cb073a3bf0e97873234fa2b05354c5f |
URLhaus payload: Mirai (elf) 2c07141082292e2c… |
medium |
Mirai |
2 |
10 |
|
|
|
URLhaus-PL-d8921d1ea232732792b90e9670d8d26b942bdf8f37bb43515db2ac94eb18c21d |
URLhaus payload: (js) d8921d1ea2327327… |
medium |
malware |
2 |
10 |
|
|
|
TF-1932692 |
ClearFake: Domain name that delivers a malware payload voidravenbastion.com |
high |
ClearFake |
2 |
10 |
|
|
|
TF-1932691 |
ClearFake: SHA256 hash of a malware sample (payload) ad7412590dbf371686d2cddde137ad5e4459a153735846cb3d7dee767247864c |
high |
ClearFake |
2 |
10 |
|
|
|