s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

Threats

307727 threats catalogued · filter, sort and triage below.

All Threats · 307727 TOTAL
All With remediations Without
Reset
ID ↕ Title ↕ Severity ↕ Category ↕ RefsRemediations Published ↕ Source updated ↕ APEX Update Time ↕
TF-2020367 Sliver: ip:port combination that is used for botnet Command&control (C&C) 104.233.154.189:31337 medium Sliver 3 0
TF-2020366 Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 201.189.50.236:3333 medium Unknown malware 3 0
TF-2020365 Sliver: ip:port combination that is used for botnet Command&control (C&C) 95.182.82.113:31337 medium Sliver 3 0
TF-2020364 Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 101.47.45.85:8443 medium Unknown malware 3 0
TF-2020363 Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 61.52.216.66:9205 medium Unknown malware 3 0
TF-2020362 Sliver: ip:port combination that is used for botnet Command&control (C&C) 217.156.65.131:31337 medium Sliver 3 0
TF-2020360 Mirai: ip:port combination that is used for botnet Command&control (C&C) 141.98.10.86:80 high Mirai 2 0
TF-2020356 php.shin_webshell: Domain name that delivers a malware payload ticohuto.workers.dev medium php.shin_webshell 2 0
TF-2020355 Unknown malware: URL that delivers a malware payload https://maplezenith.live/ high Unknown malware 3 0
TF-2020354 ClearFake: Domain name that delivers a malware payload mobiler-videoturm.ch high ClearFake 2 0
URLhaus-PL-d1e228e964b9a8de741df4eefe384a70fa926c8cc71bd1e48b5c2b41ad98ac99 URLhaus payload: (zip) d1e228e964b9a8de… medium malware 2 0
URLhaus-PL-eb73eaa3fd0a07060f675e32d4e89455aeccbf6b608783d4f9adac1585170df8 URLhaus payload: (html) eb73eaa3fd0a0706… medium malware 2 0
URLhaus-PL-5a75b0c38aec8f46ab538038eda0ff0062b98aad5342a4328211361e9e530fe0 URLhaus payload: (html) 5a75b0c38aec8f46… medium malware 2 10
URLhaus-PL-776b134d01ca6e5f6f5485cf110f1a2dfecfdd4803a508ca65410c134c978b12 URLhaus payload: (html) 776b134d01ca6e5f… medium malware 2 0
URLhaus-PL-2519a3f1407fda717b266306e6ef63751a982ab1845104a5f548da6e3200c270 URLhaus payload: (html) 2519a3f1407fda71… medium malware 2 0
URLhaus-PL-b7f8d59c1af4109b41f4af4a5c5ed2268b3c0b5cc243f5dd07b203111b8c356b URLhaus payload: (zip) b7f8d59c1af4109b… medium malware 2 0
MB-7a53aa04f5b824ace425f548c4f97362e3e93fbfbd34e85c8029b868a150eaab Mirai: arm high Mirai 1 10
URLhaus-PL-7a53aa04f5b824ace425f548c4f97362e3e93fbfbd34e85c8029b868a150eaab URLhaus payload: (elf) 7a53aa04f5b824ac… medium malware 2 0
URLhaus-PL-c2a08560ff1a9f3b371d612ab90225de16e0465ae4e7f78f027ccc3a4fb20fc3 URLhaus payload: (html) c2a08560ff1a9f3b… medium malware 2 0
MB-5f5aba8e2fae0ba27310056e191c7f8c9ad993d3811635ee74095e348010fa40 Unknown: arm7 high Unknown 1 0
URLhaus-PL-ee353b339fbaea4e03e11c95dcc2dd9f2b09534c81922b0ea9e8999da8ec6118 URLhaus payload: (unknown) ee353b339fbaea4e… medium malware 2 10
URLhaus-PL-5f5aba8e2fae0ba27310056e191c7f8c9ad993d3811635ee74095e348010fa40 URLhaus payload: (elf) 5f5aba8e2fae0ba2… medium malware 2 0
TF-2020353 Vidar: Domain that is used for botnet Command&control (C&C) yf.amanplya.org high Vidar 2 0
URLhaus-PL-4236a047946cb67d6a7e839ec4fee7092e36705e2ebb69f80a5614aa3adf8eee URLhaus payload: (js) 4236a047946cb67d… medium malware 2 10
URLhaus-PL-0c457a646184f7e933a61ccb49ceb4ab7250d7d5a95fd312bd3d7baa7d993c45 URLhaus payload: (unknown) 0c457a646184f7e9… medium malware 2 0
URLhaus-PL-2290afd672e93f28b0f8feceb51e91668858fafb85cd47b397d41e1c2bb23edb URLhaus payload: (zip) 2290afd672e93f28… medium malware 2 0
TF-2020352 Unknown Loader: SHA256 hash of a malware sample (payload) 38d9ca4f66cbff9e4af7bdde9c43ced323cf3498b2e728e52fb9eb1508e2fa32 high Unknown Loader 2 10
TF-2020351 Unknown Loader: SHA256 hash of a malware sample (payload) ef7cdf4246b43dd4cfcfcfd904f75bc25133064761309439bebd5607d96c04a0 high Unknown Loader 2 10
TF-2020350 Unknown Loader: SHA256 hash of a malware sample (payload) c54c960b487ecababb42d7e91787ad0b5c41d8c1c0d762ac18e4155f1efb1d2b high Unknown Loader 2 10
TF-2020349 Unknown Loader: SHA256 hash of a malware sample (payload) 2b0ad3caef7e974a1766b135433bfaeceb5ee4266dc410e5bd7dfb4ddc184622 high Unknown Loader 2 10
TF-2020348 Mirai: SHA256 hash of a malware sample (payload) 441001f00c258a69d19accf005444e25f03a5923cda288d70d0e3b0779aa9de2 high Mirai 2 10
TF-2020347 Mirai: SHA256 hash of a malware sample (payload) 374ff525369f14814209e0520b307da8683b1d04eac7ebf7649fd7cebd6e40d6 high Mirai 2 0
TF-2020346 ClearFake: Domain name that delivers a malware payload www.waterskiwa.com.au high ClearFake 2 0
MB-8f1920aa856881c43a2c059b814d3f2173740b181ab678cdea3a1f79d19afa3d njrat: 5346F046CD8B647D51C1C19B8916CD2D.exe high njrat 1 0
URLhaus-PL-3665a1bfaa541bcb6f19bd7949331d2192e3df62fcba4c375d5d65a3150d5b04 URLhaus payload: (html) 3665a1bfaa541bcb… medium malware 2 0
TF-2020345 ClearFake: Domain name that delivers a malware payload ssyxl35z.fadiatalahoud.com high ClearFake 2 10
URLhaus-PL-f0a5fc3c0cfab7be0cc1c43db1ad8b8629e6b3349c567c418de8ec739f3fec9c URLhaus payload: (html) f0a5fc3c0cfab7be… medium malware 2 10
MB-0b0091956fa67575276a4798a1ce9d727826e1be2f9ef0bee55d65136450970a VShell: 3A4E08A45CA6DEAFE31086E8C2CBA9A1.exe high VShell 1 0
URLhaus-PL-754d40bcd86f651dbaed0701869b8e1d7fbcdfc325e009d8d6c5ff72aff8a569 URLhaus payload: (zip) 754d40bcd86f651d… medium malware 2 0
URLhaus-PL-af38ec4b39581f7cfbf32460ff0850b9e2697480be1682d88b063e1c8e66be7e URLhaus payload: (html) af38ec4b39581f7c… medium malware 2 10
OTX-6af03509fbcfa34c267a900c Plasma - Remote Access Tool Domains - 2026-11-08 high threat-intel 1 0
TF-2020344 php.shin_webshell: Domain name that delivers a malware payload laxadi.workers.dev medium php.shin_webshell 2 10
URLhaus-PL-c233e378f344214fffdb179302b29cf18b21d7063121097aae6d2a5fb014f9cb URLhaus payload: (zip) c233e378f344214f… medium malware 2 10
TF-2020342 Remcos: ip:port combination that is used for botnet Command&control (C&C) 203.202.232.26:14642 high Remcos 3 0
TF-2020343 Remcos: ip:port combination that is used for botnet Command&control (C&C) 203.202.232.26:14643 high Remcos 3 0
MB-ed91e797ca9c4e4eebab32a142579df03627aeec35539daf43bbc17f7943ae89 RemcosRAT: 3AC9FE62B05AA373958650EDE3FC4843.exe high RemcosRAT 1 10
TF-2020341 Remcos: ip:port combination that is used for botnet Command&control (C&C) 203.202.232.26:14641 high Remcos 2 0
URLhaus-PL-6776af4da8829fdea9efef86989ed71672c1c48fa5a0473de4f7549792baf200 URLhaus payload: (zip) 6776af4da8829fde… medium malware 2 0
MB-edac18eb441696bcd1f5a42a9313f5ba5896f44ba8cdd43037bd86beae4c6cef Unknown: bot.x86_64 high Unknown 1 10
MB-ff0edeab4ab7d9d2db92750c7e76ec2eac8ecb89c300e9d922266fbe7fc97bcc VShell: 1e1739ca1154feeacf63af19875ec531.exe high VShell 1 0
Showing 151–200 of 307727 threats (page 4 of 6155).