MB-3e6b5327d9d19cdcd8adf389b991cba090c49bd9f11d4909da89e19420c16b42 |
ValleyRAT: 83A191C82A700BD83128F7AD8576A1CD.dll |
high |
ValleyRAT |
1 |
10 |
|
|
|
TF-1868538 |
ValleyRAT: ip:port combination that is used for botnet Command&control (C&C) 118.107.43.220:8080 |
high |
ValleyRAT |
2 |
6 |
|
|
|
MB-a85a685e8753319479922d6098726906804dca6a518205ed70fd555c5289d743 |
DCRat: 0a3e2c2bd38771605cb2eeae9c8cbc62.exe |
high |
DCRat |
1 |
10 |
|
|
|
TF-1868537 |
DCRat: URL that is used for botnet Command&control (C&C) http://ck077996.tw1.ru/L1nc0In.php |
high |
DCRat |
2 |
10 |
|
|
|
MB-5d8b365ca864c693f967e2b087db0838dea3cb639325ae9be1df085b771f8796 |
RemcosRAT: Order Specicifications-request for AYB64537.J.js |
high |
RemcosRAT |
1 |
10 |
|
|
|
TF-1868536 |
Remcos: ip:port combination that is used for botnet Command&control (C&C) 172.245.209.149:2414 |
high |
Remcos |
2 |
10 |
|
|
|
MB-1f0ed64ac1128b10a54ad87cf10d1145bf56e7046b1eb7da1ff5162a0661dc8a |
Pony: FEE9A1FF4882BA692E235A8CE1E525B1.exe |
high |
Pony |
1 |
10 |
|
|
|
TF-1868535 |
Vidar: URL that is used for botnet Command&control (C&C) https://psk.y8slot.net/ |
high |
Vidar |
2 |
10 |
|
|
|
MB-93cfcf58ba02b6704041d8e036b4230a4ba9561723c5e7e8fdce681684864870 |
Pony: A06194A36273470E5BEDEBE9D313B951.exe |
high |
Pony |
1 |
10 |
|
|
|
TF-1868534 |
Vidar: Domain that is used for botnet Command&control (C&C) psk.y8slot.net |
high |
Vidar |
2 |
10 |
|
|
|
TF-1868533 |
Vidar: URL that is used for botnet Command&control (C&C) https://psk.sinism188.top/ |
high |
Vidar |
2 |
10 |
|
|
|
TF-1868532 |
Vidar: Domain that is used for botnet Command&control (C&C) psk.sinism188.top |
high |
Vidar |
2 |
10 |
|
|
|
TF-1868531 |
Pony: URL that is used for botnet Command&control (C&C) http://mainserver.com/gate.php |
high |
Pony |
2 |
10 |
|
|
|
CVE-2026-45100 |
OpenSIPS: Buffer Overflow in Base64 Encode Transformation |
critical |
cve |
0 |
0 |
|
|
|
MB-97b2a7b78f98521a1436c44adb0f717b84364f67f4444b22d544caa2eba8811b |
NanoCore: 23d82b604133932ba4391ae7fb344dd0.exe |
high |
NanoCore |
1 |
10 |
|
|
|
TF-1868530 |
ClearFake: Domain name that delivers a malware payload ldtwsfb.quiltlegacy.net |
high |
ClearFake |
2 |
10 |
|
|
|
TF-1868529 |
ClearFake: Domain name that delivers a malware payload quiltlegacy.net |
high |
ClearFake |
2 |
10 |
|
|
|
MB-b481cc2e88ab19b63fca837aef5d80b961659621db8650ee307305062b4eeb41 |
Mirai: data_x86_64 |
high |
Mirai |
1 |
10 |
|
|
|
MB-844b854d590e9ebe4ae09a7233125f473ce3b05312bce3374b5f05c7d50d123a |
Mirai: data_mipsel |
high |
Mirai |
1 |
10 |
|
|
|
MB-6c65afb1eb421e192dd0b6ab9fa187b0973d43f10763279dd7f60098ec1acd69 |
Mirai: data_mips |
high |
Mirai |
1 |
10 |
|
|
|
URLhaus-PL-404d41bd33709dcae130000cbc0317b3bdb632315e0245b82d465f0b0edac832 |
URLhaus payload: (html) 404d41bd33709dca… |
medium |
malware |
2 |
10 |
|
|
|
TF-1868528 |
Mirai: ip:port combination that delivery a malware payload 45.38.249.148:1004 |
medium |
Mirai |
2 |
10 |
|
|
|
URLhaus-PL-b481cc2e88ab19b63fca837aef5d80b961659621db8650ee307305062b4eeb41 |
URLhaus payload: Mirai (elf) b481cc2e88ab19b6… |
medium |
Mirai |
2 |
10 |
|
|
|
URLhaus-PL-844b854d590e9ebe4ae09a7233125f473ce3b05312bce3374b5f05c7d50d123a |
URLhaus payload: Mirai (elf) 844b854d590e9ebe… |
medium |
Mirai |
2 |
10 |
|
|
|
URLhaus-PL-6c65afb1eb421e192dd0b6ab9fa187b0973d43f10763279dd7f60098ec1acd69 |
URLhaus payload: Mirai (elf) 6c65afb1eb421e19… |
medium |
Mirai |
2 |
10 |
|
|
|
MB-b19eb2605a969acda3bd284d2376acc657c3a556d4c81ce17eaaabe39d48b990 |
CoinMiner: file |
high |
CoinMiner |
1 |
10 |
|
|
|
TF-1868527 |
ClearFake: Domain name that delivers a malware payload c4nrz428.gregoryschreiercabinetmaker.com |
high |
ClearFake |
2 |
10 |
|
|
|
CVE-2026-45084 |
OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type state |
high |
cve |
0 |
0 |
|
|
|
TF-1868526 |
ClearFake: Domain name that delivers a malware payload g5u8gksz.federationofpbos.org |
high |
ClearFake |
2 |
10 |
|
|
|
MB-0d298a65db890328d0357b2fb39ea7352645a994a601f430c38450769635f957 |
RemusStealer: file |
high |
RemusStealer |
1 |
10 |
|
|
|
CVE-2026-70619 |
Odysseus Missing Admin Authorization via Embedding Endpoint Routes |
high |
cve |
0 |
0 |
|
|
|
MB-b7db32e16aa207e3643f6f9a1b076e7b8ffdb8166ff5e76fe966ae0c94638ac0 |
Mirai: boatnet.mips |
high |
Mirai |
1 |
10 |
|
|
|
MB-6e7d98f590da5a91bf0285d31002b80fb373a88aa1c355e63da5f6a4bd8f46c1 |
Mirai: boatnet.arm7 |
high |
Mirai |
1 |
10 |
|
|
|
MB-668ecef78b39f2b1b602b54d4701546dfb5c6b0701449bb3d8282fc845b4e029 |
Mirai: boatnet.arm |
high |
Mirai |
1 |
10 |
|
|
|
MB-111c0e6222dfb48fa9cb3e4b9f89f7ca8d610c5ef8dd337e6f810d06a1217b77 |
Mirai: boatnet.ppc |
high |
Mirai |
1 |
10 |
|
|
|
MB-45d4f75e7486a914b9f9125b87e427dd62eb4c9c8acb1b2f8cfb5ffbb7577ed1 |
Mirai: boatnet.x86_64 |
high |
Mirai |
1 |
10 |
|
|
|
MB-3252b9d9d57615060976d4b3bed8684dd59539a0d0cc5616564f132859cb2b5e |
Mirai: boatnet.arm5 |
high |
Mirai |
1 |
10 |
|
|
|
MB-ae4525d81a9b2b1ba4e53b778344f1e412c1ead8ddc3eec317bbf41c18514680 |
Mirai: boatnet.mips |
high |
Mirai |
1 |
10 |
|
|
|
MB-5a9589968d81f208848a2bbf9d701f99b27ae151876be0fa79fa1809cf5a538b |
Mirai: boatnet.arm7 |
high |
Mirai |
1 |
10 |
|
|
|
MB-aabfd94ac3d68386aa56acff0742e2578bc5f39a2f0a75691c5123afc188765c |
Mirai: boatnet.arm |
high |
Mirai |
1 |
10 |
|
|
|
MB-23f3ae269c70ab194b6d41e797d4f06b22d7a480e31e24c99586445820944e13 |
Mirai: boatnet.sh4 |
high |
Mirai |
1 |
10 |
|
|
|
MB-477900af6dd3d8bb0d344336107c2a7f82461e0c7215709071693bf33480b757 |
Mirai: boatnet.ppc |
high |
Mirai |
1 |
10 |
|
|
|
MB-d011b612bea1fd0f2c0ebc85b31fe32e7402727156a8bde880d74f2b3ba0f1e2 |
Mirai: boatnet.m68k |
high |
Mirai |
1 |
10 |
|
|
|
MB-799c0a87c8d9cabf94caca9234e3fb9922d96e7b2dbe517cb3f2240766c32be6 |
Mirai: boatnet.arc |
high |
Mirai |
1 |
10 |
|
|
|
MB-ba68dbe66c6f0819300ccdb4f5cc5110591047bbdc01ae165f5b220dbbfc7252 |
Mirai: boatnet.spc |
high |
Mirai |
1 |
10 |
|
|
|
MB-9e79a7f08996cfcfe734bf6e18bfde8381660f09a4d8c3b950657f5bfd808e84 |
Mirai: boatnet.x86_64 |
high |
Mirai |
1 |
10 |
|
|
|
MB-f4a3ad5d24d34f68844cdcb9928fe2ab9cedc958ecf178064409350e0e921bf2 |
Mirai: boatnet.arm5 |
high |
Mirai |
1 |
10 |
|
|
|
CVE-2026-18814 |
H3C NX15 esps reload.reload_config command injection |
high |
cve |
0 |
0 |
|
|
|
URLhaus-PL-ae4525d81a9b2b1ba4e53b778344f1e412c1ead8ddc3eec317bbf41c18514680 |
URLhaus payload: Mirai (elf) ae4525d81a9b2b1b… |
medium |
Mirai |
2 |
10 |
|
|
|
URLhaus-PL-5a9589968d81f208848a2bbf9d701f99b27ae151876be0fa79fa1809cf5a538b |
URLhaus payload: Mirai (elf) 5a9589968d81f208… |
medium |
Mirai |
2 |
10 |
|
|
|