MB-2a3b30f3e5a7a8d8c001fa2cfa451154a2a98110c6006a8d09178167f2ab138b |
Unknown: 2a3b30f3e5a7a8d8c001fa2cfa451154a2a98110c6006a8d09178167f2ab138b.elf |
high |
Unknown |
1 |
10 |
|
|
|
MB-3dd9ac7194cfdd4376196ffbb7b2c608ea11fc80ba1672dda6529109ecdf55e8 |
Unknown: 3dd9ac7194cfdd4376196ffbb7b2c608ea11fc80ba1672dda6529109ecdf55e8.elf |
high |
Unknown |
1 |
10 |
|
|
|
TF-1932669 |
php.shin_webshell: Domain that is used for botnet Command&control (C&C) violetdonia.workers.dev |
medium |
php.shin_webshell |
2 |
10 |
|
|
|
MB-032cf5ab06d8bf4bd324765b3179c4ab28eea7c8c949e8cf60044937d3e1cc7f |
Mirai: stub.armv7 |
high |
Mirai |
1 |
10 |
|
|
|
MB-5521e5e983dab5cd88bade12170967f0b85ea80829eeeed02cd84f9db979ddb4 |
Unknown: payload.bin.malware |
high |
Unknown |
1 |
10 |
|
|
|
MB-6d597ae1b707b6d0b1afda261f4bb99502940d70168d614d6af82ec088628507 |
Mirai: 6d597ae1b707b6d0b1afda261f4bb99502940d70168d614d6af82ec088628507 |
high |
Mirai |
1 |
10 |
|
|
|
MB-2d2fdfc7b1dd18dfa690ca08b5e738ed3760866d5be2109915c4445502eedd21 |
Unknown: 2d2fdfc7b1dd18dfa690ca08b5e738ed3760866d5be2109915c4445502eedd21.bin |
high |
Unknown |
1 |
10 |
|
|
|
MB-b6307cb3e0da1b5393cc002bdc02458d2a2604be5f12d184965f807e0d4415a8 |
VShell: b6307cb3e0da1b5393cc002bdc02458d2a2604be5f12d184965f807e0d4415a8.exe |
high |
VShell |
1 |
10 |
|
|
|
CVE-2026-97737 |
CVE-2026-97737 |
high |
cve |
0 |
0 |
|
|
|
MB-4131c88b0dea6ba45cd633eed383240d41620e4467afa4e956d6c2dfafd58c1c |
Unknown: WindowsCodecs.dll |
high |
Unknown |
1 |
10 |
|
|
|
TF-1932668 |
Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 122.10.71.108:34890 |
high |
Unknown malware |
2 |
10 |
|
|
|
TF-1932667 |
Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 122.10.71.108:8888 |
high |
Unknown malware |
2 |
9 |
|
|
|
TF-1932666 |
Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 122.10.71.108:888 |
high |
Unknown malware |
2 |
10 |
|
|
|
TF-1932665 |
Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 122.10.71.108:80 |
high |
Unknown malware |
2 |
10 |
|
|
|
TF-1932664 |
Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 122.10.24.106:50918 |
high |
Unknown malware |
2 |
10 |
|
|
|
MB-6cf2e852833668a207b89b003ebbb7ccddef6d1d892fb2f592e0b03154fae39a |
VShell: 6cf2e852833668a207b89b003ebbb7ccddef6d1d892fb2f592e0b03154fae39a.exe |
high |
VShell |
1 |
10 |
|
|
|
MB-16db4b5aefca60a0f98d0aae888bdafd813a8a5f37fd2264b1667ec4f11b0698 |
VShell: 16db4b5aefca60a0f98d0aae888bdafd813a8a5f37fd2264b1667ec4f11b0698.exe |
high |
VShell |
1 |
10 |
|
|
|
MB-b78a29eab41dc72b66375a7d9a8fad8d5942bfe3be9bed26a8bc9a0287c446e0 |
OverlordRAT: file |
high |
OverlordRAT |
1 |
10 |
|
|
|
MB-32aaa1d07dc07217223009ad404925c5b518907e3b6c8aad1c2250e9f9dc54aa |
OverlordRAT: file |
high |
OverlordRAT |
1 |
10 |
|
|
|
TF-1932663 |
ClearFake: Domain name that delivers a malware payload www.homeworksmusicstudio.com |
high |
ClearFake |
2 |
10 |
|
|
|
TF-1932662 |
ClearFake: Domain name that delivers a malware payload hoosierdaddygarageclub.com |
high |
ClearFake |
2 |
10 |
|
|
|
MB-d3e5d5e5289c2e39e12dc91a4e286faf64812bf68c83c1f37e88b2fac79d105c |
RustyStealer: file |
high |
RustyStealer |
1 |
10 |
|
|
|
TF-1932661 |
Cobalt Strike: ip:port combination that is used for botnet Command&control (C&C) 45.227.253.132:56225 |
high |
Cobalt Strike |
2 |
6 |
|
|
|
TF-1932660 |
Cobalt Strike: ip:port combination that is used for botnet Command&control (C&C) 43.136.69.37:443 |
high |
Cobalt Strike |
2 |
4 |
|
|
|
TF-1932659 |
Cobalt Strike: ip:port combination that is used for botnet Command&control (C&C) 42.51.44.173:18443 |
high |
Cobalt Strike |
2 |
7 |
|
|
|
MB-db74e8707f2dd7fe3819ce7ac210299191f7936dde7ae59a647dfdb9c8e44ea3 |
Mirai: cwlfkwnt.arm |
high |
Mirai |
1 |
10 |
|
|
|
MB-5103d28c77c07c46450180d80c78de6346c580ea63f2dde2cdb9163ec53495d3 |
Mirai: bot.i686 |
high |
Mirai |
1 |
10 |
|
|
|
TF-1932658 |
Cobalt Strike: ip:port combination that is used for botnet Command&control (C&C) 139.196.50.117:8839 |
high |
Cobalt Strike |
2 |
9 |
|
|
|
TF-1932657 |
Cobalt Strike: Domain that is used for botnet Command&control (C&C) i.gckni.com |
high |
Cobalt Strike |
2 |
10 |
|
|
|
CVE-2026-97735 |
CVE-2026-97735 |
high |
cve |
0 |
0 |
|
|
|
MB-2b6c2e6c2ef7396f6dca3183fb894ff41b3180bac8d9746c124de7b4ef3575a0 |
Mirai: SecuriteInfo.com.ELF.Mirai-COW.41418858 |
high |
Mirai |
1 |
10 |
|
|
|
MB-5b7e6286c02ededd19289332860e76ed053797d7f31d4be7806a2ac6f3e58694 |
Mirai: SecuriteInfo.com.Heur.21131.6862 |
high |
Mirai |
1 |
10 |
|
|
|
MB-27c593a40a437810124f2f43a9d67365f1b91a3f52ab64e44d0f5b120ca78136 |
Mirai: SecuriteInfo.com.ELF.Mirai-COW.97552716 |
high |
Mirai |
1 |
10 |
|
|
|
MB-1d55613d5c924ace53b733096a9ffe3c22c3f703f8abc4b18e55e1f75dd9f3d5 |
Mirai: SecuriteInfo.com.Heur.8161.10136 |
high |
Mirai |
1 |
10 |
|
|
|
MB-a965431e4a881f482e7e71d6f6e52c5c7ab05ce75e656869558c194d167bb5bf |
Mirai: SecuriteInfo.com.Heur.23741.18903 |
high |
Mirai |
1 |
10 |
|
|
|
TF-1932654 |
Mirai: SHA256 hash of a malware sample (payload) 640e6ad1c159f02c2e940290113a3d48cf78f33e930217802f13eaa3b62cc384 |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932653 |
Mirai: SHA256 hash of a malware sample (payload) 3b6786813f55f4f49a2ea1bac64413b94523bc4468ab02f403c6912cbb703377 |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932652 |
Mirai: SHA256 hash of a malware sample (payload) 6c420372a15415c1544790df5fe5ce9c6ff0bbef65546c83e02110307e3a32ff |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932651 |
Mirai: SHA256 hash of a malware sample (payload) 41a7d7a61716cf707ca471609069bdf649ed687c1c29c52aa196aaef75f8d077 |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932650 |
Mirai: SHA256 hash of a malware sample (payload) ac534a13006b72805cc12ea91ff2e06ab843c3806eca0e21e81f163dbd5212c6 |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932649 |
Mirai: SHA256 hash of a malware sample (payload) c754338f9ebacd78d7582f28729705d4e61c0ef05f9b8e13a71a6a0f05438dab |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932648 |
Mirai: SHA256 hash of a malware sample (payload) 8738d60030156b9cd03f939bad1257e7cd34de4adda9c84841564995353df593 |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932647 |
Mirai: SHA256 hash of a malware sample (payload) f1617c27d3c3b58cb6f930e21b5ffb002915ab4f7424c77552be9f82180409a8 |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932646 |
Mirai: SHA256 hash of a malware sample (payload) 939a999e03e1f80f3eb8e4e04b93c42339261e463e16582c2cccda1a28b57a8a |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932645 |
Mirai: SHA256 hash of a malware sample (payload) d64ad56eca41d47cfb7f534623071dbdff25a49cdceae4dc9de6d7cdfa22e7ea |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932644 |
Mirai: SHA256 hash of a malware sample (payload) 54d08acac87f7b50b4aca64be345b520d03f00818b8288fbfa4034d1bffe5800 |
high |
Mirai |
2 |
10 |
|
|
|
TF-1932643 |
Bashlite: SHA256 hash of a malware sample (payload) b2e247ce007772e6b47aee8602399dfa3c305cd640d8350da80364ab42532fd4 |
high |
Bashlite |
2 |
10 |
|
|
|
TF-1932642 |
Unknown Loader: SHA256 hash of a malware sample (payload) 597e1f47936b2dc91df74e9769273a62730043b835e260c77950672db2c5b009 |
high |
Unknown Loader |
2 |
10 |
|
|
|
TF-1932641 |
ClearFake: Domain name that delivers a malware payload ey7qdgkv.bazikonbartar.ir |
high |
ClearFake |
2 |
10 |
|
|
|
TF-1932640 |
Unknown malware: URL that delivers a malware payload https://www.rivistalibera.it/ |
high |
Unknown malware |
3 |
10 |
|
|
|