s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

Threats

306608 threats catalogued · filter, sort and triage below.

All Threats · 306608 TOTAL
All With remediations Without
Reset
ID ↕ Title ↕ Severity ↕ Category ↕ RefsRemediations Published ↕ Source updated ↕ APEX Update Time ↕
MB-b5c8098c5dff7eb532235a0026dabeedfd29dcb14e26464c6c7550e4db64d1af Mirai: debug.dbg high Mirai 1 10
TF-2020424 Vidar: Domain that is used for botnet Command&control (C&C) dav88.org high Vidar 2 10
TF-2020423 Vidar: Domain that is used for botnet Command&control (C&C) s.dav88.org high Vidar 2 10
TF-2020418 ClearFake: Domain name that delivers a malware payload fhsco.com.my high ClearFake 2 10
MB-f00ef379292322e9187611f4ec0c6abc612e5a65d5f7f91ceb389c5e34cd9195 Unknown: 5a726723452b91f8f17aeb8063a82782.exe high Unknown 1 10
MB-6be877166823cc75df37fe45792d71ae993bebb4680c68d10cb6c6a3b439cd29 Unknown: mips high Unknown 1 10
TF-2020415 Unknown Loader: SHA256 hash of a malware sample (payload) 057e4508e805e7218daa6f1daa058f11116fdec2a74dc865319b556ebd640e82 high Unknown Loader 2 10
TF-2020412 Unknown Loader: SHA256 hash of a malware sample (payload) 7cc114bd86274f4266b402a1881fdb2d22cccb9d92d94186dfd7629ed6b1e39b high Unknown Loader 2 10
TF-2020409 Unknown Loader: SHA256 hash of a malware sample (payload) 3e3a53b7016a9426cbd7e77ed22429ee2e84eb5033700a1f7c373c139e5dd26a high Unknown Loader 2 10
MB-2ec27605d8a42fea6ef86e6f8b7fd416c2ef598f5e912333c5c4c0ec14a47314 ConnectWise: Howard.ScreenConnect.ClientSetup.msi high ConnectWise 1 10
TF-2020408 Unknown RAT: Domain that is used for botnet Command&control (C&C) panel.strong-men.icu high Unknown RAT 3 10
TF-2020407 Unknown RAT: ip:port combination that is used for botnet Command&control (C&C) 31.57.38.180:8041 high Unknown RAT 3 10
MB-85e21947990155dafda7f5f42350e402c443f9851396128214d5a7ec4ae83545 SnappyClient: 1.exe high SnappyClient 1 10
MB-bbd0ecd8addc89b045dcca50bb501dec7987bc96f68b5f05e67d9ad559f6ab6f SalatStealer: CS2_Ultimate_Optimizer.bat high SalatStealer 1 10
MB-1a9c85046db6983f741c7706861c4080762ec7059df38f0522ace6f7e36cac55 SnappyClient: 1.exe high SnappyClient 1 10
MB-f7e8e61cbce426555822b337eac7560747e35b16799a4bab39abad9025464351 NanoCore: BB7D77E2E8DC5037206D16ECFBBE4983.exe high NanoCore 1 10
MB-ae7ca54128c242a0156ba3a4074ad1af43a0bccc1e58a6126bf1dfd7084da987 Unknown: stage1.cmd high Unknown 1 10
MB-d268d7cd8c346a7ac18d1dcf71e925f955ee28c76aa46c3f9e1ba0a36af845e7 Unknown: bot.exe high Unknown 1 10
MB-67483a89ffbe3c9fd87b141f74c4db118e5ef18b8d85daa4e60970b80a7cdbd5 Unknown: Invoice RK25.037-11-26 IPA.doc high Unknown 1 10
MB-a0796de3b0f3b80b721a15e1b4cb523d617e53541f8a2ef00e95864c4300f710 GolstaStealer: 16ccc76a17cb2da3d715854e8729ff04.exe high GolstaStealer 1 10
URLhaus-PL-5a75b0c38aec8f46ab538038eda0ff0062b98aad5342a4328211361e9e530fe0 URLhaus payload: (html) 5a75b0c38aec8f46… medium malware 2 10
MB-7a53aa04f5b824ace425f548c4f97362e3e93fbfbd34e85c8029b868a150eaab Mirai: arm high Mirai 1 10
URLhaus-PL-ee353b339fbaea4e03e11c95dcc2dd9f2b09534c81922b0ea9e8999da8ec6118 URLhaus payload: (unknown) ee353b339fbaea4e… medium malware 2 10
URLhaus-PL-4236a047946cb67d6a7e839ec4fee7092e36705e2ebb69f80a5614aa3adf8eee URLhaus payload: (js) 4236a047946cb67d… medium malware 2 10
TF-2020352 Unknown Loader: SHA256 hash of a malware sample (payload) 38d9ca4f66cbff9e4af7bdde9c43ced323cf3498b2e728e52fb9eb1508e2fa32 high Unknown Loader 2 10
TF-2020351 Unknown Loader: SHA256 hash of a malware sample (payload) ef7cdf4246b43dd4cfcfcfd904f75bc25133064761309439bebd5607d96c04a0 high Unknown Loader 2 10
TF-2020350 Unknown Loader: SHA256 hash of a malware sample (payload) c54c960b487ecababb42d7e91787ad0b5c41d8c1c0d762ac18e4155f1efb1d2b high Unknown Loader 2 10
TF-2020349 Unknown Loader: SHA256 hash of a malware sample (payload) 2b0ad3caef7e974a1766b135433bfaeceb5ee4266dc410e5bd7dfb4ddc184622 high Unknown Loader 2 10
TF-2020348 Mirai: SHA256 hash of a malware sample (payload) 441001f00c258a69d19accf005444e25f03a5923cda288d70d0e3b0779aa9de2 high Mirai 2 10
TF-2020345 ClearFake: Domain name that delivers a malware payload ssyxl35z.fadiatalahoud.com high ClearFake 2 10
URLhaus-PL-f0a5fc3c0cfab7be0cc1c43db1ad8b8629e6b3349c567c418de8ec739f3fec9c URLhaus payload: (html) f0a5fc3c0cfab7be… medium malware 2 10
URLhaus-PL-af38ec4b39581f7cfbf32460ff0850b9e2697480be1682d88b063e1c8e66be7e URLhaus payload: (html) af38ec4b39581f7c… medium malware 2 10
TF-2020344 php.shin_webshell: Domain name that delivers a malware payload laxadi.workers.dev medium php.shin_webshell 2 10
URLhaus-PL-c233e378f344214fffdb179302b29cf18b21d7063121097aae6d2a5fb014f9cb URLhaus payload: (zip) c233e378f344214f… medium malware 2 10
MB-ed91e797ca9c4e4eebab32a142579df03627aeec35539daf43bbc17f7943ae89 RemcosRAT: 3AC9FE62B05AA373958650EDE3FC4843.exe high RemcosRAT 1 10
MB-edac18eb441696bcd1f5a42a9313f5ba5896f44ba8cdd43037bd86beae4c6cef Unknown: bot.x86_64 high Unknown 1 10
MB-79285c6103ceb48720fda612a0d519306cc4bc47838b07ce27c86c2bcfe56749 VShell: 1e18f1cefd29ba176b177960ecbfe8c6.exe high VShell 1 10
MB-08dbe3ce2bb34e0f4f7db395b44cf45b7b0c22f5558d64bac8c862783aaad25a VShell: 1c8494b2943415f30eea9893224c7ff9.exe high VShell 1 10
TF-2020339 ClearFake: Domain name that delivers a malware payload fcdnbovres.cc high ClearFake 2 10
TF-2020338 Vidar: Domain that is used for botnet Command&control (C&C) amanplya.org high Vidar 2 10
CVE-2026-114713 CVE-2026-114713 high cve 0 10
CVE-2026-123616 imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader high cve 0 10
CVE-2026-123615 imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader high cve 0 10
CVE-2026-123614 imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow critical cve 0 10
CVE-2026-123608 Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression high cve 0 10
CVE-2026-123607 Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service high cve 0 10
CVE-2026-123606 Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification high cve 0 10
CVE-2026-123604 Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop high cve 0 10
CVE-2026-123602 Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching high cve 0 10
CVE-2026-123601 Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery high cve 0 10
Showing 1–50 of 306608 threats (page 1 of 6133).