← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
ThreatFox Hunt: Unknown malware IOCs - 2025-12-27
WHITE pduggusa 2025-12-27 Modified: 2026-01-26
66
IOCs
HIGH VOLUME
Automated ThreatFox hunt for Unknown malware indicators. 161 IOCs collected via Pattern 49 intelligence streaming. MITRE ATT&CK: T1071.001, T1105. Reference: https://analytics.dugganusa.com
unknown-malwarethreatfoxautomated-huntpattern-49dugganusaunattributed
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Unknown malware
Indicators of Compromise (66)
All hostname URL domain
TYPEINDICATORDESCRIPTIONCREATED
hostname www.justformyeyes.com Unknown malware botnet_cc - ThreatFox ID: 1686487 2025-12-27
URL http://130.12.180.20:30677/cat.sh Unknown malware payload_delivery - ThreatFox ID: 1686496 2025-12-27
URL http://87.121.84.181/catgirl.mips Unknown malware payload_delivery - ThreatFox ID: 1686714 2025-12-27
URL https://152.53.251.129/ Unknown malware payload_delivery - ThreatFox ID: 1686872 2025-12-27
URL https://www.trading-lots-money.com/ Unknown malware payload_delivery - ThreatFox ID: 1686873 2025-12-27
URL https://high888.org/ALFA_DATA/servicekarten/login.php Unknown malware payload_delivery - ThreatFox ID: 1686874 2025-12-27
URL https://13.58.101.213/ Unknown malware payload_delivery - ThreatFox ID: 1686875 2025-12-27
URL https://www.phcolo.ph/ Unknown malware payload_delivery - ThreatFox ID: 1686876 2025-12-27
URL https://ptashka.bar/ Unknown malware payload_delivery - ThreatFox ID: 1686877 2025-12-27
URL https://84.247.160.134/ Unknown malware payload_delivery - ThreatFox ID: 1686878 2025-12-27
URL https://35.226.92.8/ Unknown malware payload_delivery - ThreatFox ID: 1686879 2025-12-27
URL https://201.249.59.30/ Unknown malware payload_delivery - ThreatFox ID: 1686880 2025-12-27
URL https://52.17.169.135/ Unknown malware payload_delivery - ThreatFox ID: 1686881 2025-12-27
URL https://150.95.27.35/ Unknown malware payload_delivery - ThreatFox ID: 1686882 2025-12-27
URL https://18.119.94.147/ Unknown malware payload_delivery - ThreatFox ID: 1686883 2025-12-27
URL https://64.32.48.49/ Unknown malware payload_delivery - ThreatFox ID: 1686884 2025-12-27
URL https://54.173.170.130/ Unknown malware payload_delivery - ThreatFox ID: 1686885 2025-12-27
URL https://216.92.95.60/ Unknown malware payload_delivery - ThreatFox ID: 1686886 2025-12-27
URL https://178.79.182.67/ Unknown malware payload_delivery - ThreatFox ID: 1686887 2025-12-27
URL https://185.190.250.104/ Unknown malware payload_delivery - ThreatFox ID: 1686888 2025-12-27
URL https://44.208.147.17/ Unknown malware payload_delivery - ThreatFox ID: 1686889 2025-12-27
URL https://173.255.252.25/ Unknown malware payload_delivery - ThreatFox ID: 1686890 2025-12-27
URL https://112.196.50.214/ Unknown malware payload_delivery - ThreatFox ID: 1686891 2025-12-27
URL https://185.116.193.105/ Unknown malware payload_delivery - ThreatFox ID: 1686892 2025-12-27
URL https://77.120.165.2/ Unknown malware payload_delivery - ThreatFox ID: 1686893 2025-12-27
URL https://185.109.216.74/ Unknown malware payload_delivery - ThreatFox ID: 1686894 2025-12-27
URL https://91.134.176.227/ Unknown malware payload_delivery - ThreatFox ID: 1686895 2025-12-27
URL https://162.43.87.24/ Unknown malware payload_delivery - ThreatFox ID: 1686896 2025-12-27
URL https://31.147.204.35/ Unknown malware payload_delivery - ThreatFox ID: 1686897 2025-12-27
URL https://138.199.222.6/ Unknown malware payload_delivery - ThreatFox ID: 1686898 2025-12-27
URL https://102.206.27.46/ Unknown malware payload_delivery - ThreatFox ID: 1686899 2025-12-27
URL https://18.221.122.235/ Unknown malware payload_delivery - ThreatFox ID: 1686900 2025-12-27
URL https://167.71.110.80/ Unknown malware payload_delivery - ThreatFox ID: 1686901 2025-12-27
URL https://198.7.124.197/ Unknown malware payload_delivery - ThreatFox ID: 1686902 2025-12-27
URL http://bobrecurwarmumsworms.com:8080/updater?for=0AA6B9F07A5B27B2069C137C69EC91EB Unknown malware botnet_cc - ThreatFox ID: 1686929 2025-12-27
URL https://3.143.145.55/ Unknown malware payload_delivery - ThreatFox ID: 1686936 2025-12-27
hostname q.ciberseguridad-eia.xyz Unknown malware botnet_cc - ThreatFox ID: 1686969 2025-12-27
URL https://35.183.218.216/ Unknown malware payload_delivery - ThreatFox ID: 1686984 2025-12-27
URL https://72.62.20.196/ Unknown malware payload_delivery - ThreatFox ID: 1686985 2025-12-27
URL https://157.230.182.134/ Unknown malware payload_delivery - ThreatFox ID: 1686986 2025-12-27
URL https://195.15.215.249/ Unknown malware payload_delivery - ThreatFox ID: 1686987 2025-12-27
URL https://206.189.236.65/ Unknown malware payload_delivery - ThreatFox ID: 1687016 2025-12-27
URL https://64.23.172.46/ Unknown malware payload_delivery - ThreatFox ID: 1687017 2025-12-27
URL https://152.42.225.73/ Unknown malware payload_delivery - ThreatFox ID: 1687018 2025-12-27
URL https://45.79.202.83/ Unknown malware payload_delivery - ThreatFox ID: 1687019 2025-12-27
URL https://148.113.205.94/ Unknown malware payload_delivery - ThreatFox ID: 1687020 2025-12-27
URL http://shalyunkotmoroz-104.icu/b5a52ebb310b65f06dd10cfe69f72363/ Unknown malware botnet_cc - ThreatFox ID: 1687039 2025-12-27
domain shalyunkotmoroz-104.icu Unknown malware botnet_cc - ThreatFox ID: 1687040 2025-12-27
URL https://13.218.57.74/ Unknown malware payload_delivery - ThreatFox ID: 1687071 2025-12-27
URL https://185.4.64.128/ Unknown malware payload_delivery - ThreatFox ID: 1687072 2025-12-27
URL https://192.53.167.241/ Unknown malware payload_delivery - ThreatFox ID: 1687073 2025-12-27
URL https://132.148.78.83/ Unknown malware payload_delivery - ThreatFox ID: 1687074 2025-12-27
URL https://178.236.16.12/ Unknown malware payload_delivery - ThreatFox ID: 1687075 2025-12-27
URL https://49.13.228.105/ Unknown malware payload_delivery - ThreatFox ID: 1687076 2025-12-27
URL https://65.21.248.222/ Unknown malware payload_delivery - ThreatFox ID: 1687077 2025-12-27
URL https://185.4.65.177/ Unknown malware payload_delivery - ThreatFox ID: 1687078 2025-12-27
URL https://81.198.74.227/ Unknown malware payload_delivery - ThreatFox ID: 1687079 2025-12-27
URL https://78.46.240.128/ Unknown malware payload_delivery - ThreatFox ID: 1687080 2025-12-27
URL https://kanekoyozo.jp/ Unknown malware payload_delivery - ThreatFox ID: 1687122 2025-12-27
URL https://169.50.189.146/ Unknown malware payload_delivery - ThreatFox ID: 1687138 2025-12-27
URL https://82.165.173.192/ Unknown malware payload_delivery - ThreatFox ID: 1687139 2025-12-27
URL https://216.92.226.14/ Unknown malware payload_delivery - ThreatFox ID: 1687140 2025-12-27
URL https://167.86.117.147/ Unknown malware payload_delivery - ThreatFox ID: 1687141 2025-12-27
URL https://188.166.162.138/ Unknown malware payload_delivery - ThreatFox ID: 1687142 2025-12-27
hostname github.ciberseguridad-eia.xyz Unknown malware botnet_cc - ThreatFox ID: 1687291 2025-12-27
hostname api.ciberseguridad-eia.xyz Unknown malware botnet_cc - ThreatFox ID: 1687292 2025-12-27
References (2)
↗ https://analytics.dugganusa.com/api/v1/stix-feed/v2 ↗ https://threatfox.abuse.ch