Æ / PUBLIC MALWARE INTELLIGENCE

Follow the evidence.

Published file metadata, source observations and research history in one connected catalog.

122,546Catalog records

55,464File records

136,913Source observations

123Family labels

SearchRecord typeSourceSeen / collected sinceMinimum source confidenceClear filters

122,546 MATCHING RECORDS

Export metadata JSON · CSV

INDICATOR1 SOURCE

URL http://107.172.31.5/comonstraints.vbs

Indicator published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

FILE1 SOURCE

SHA256 fb5116f93365182f235b12d780e03bb8a2a98f389f81cf0d5832dbdc722b346d

fb5116f93365182f235b12d780e03bb8a2a98f389f81cf0d5832dbdc722b346d

File hash published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

REFERENCE1 SOURCE

ftp://ftp.horeca-bucuresti.ro

STIX pattern requires a compatible detection engine; no exact observable was extracted.

malicious-activity

Collected 2026-10-08 07:52 UTCOpen evidence record

FILE1 SOURCE

SHA256 df215a01f6a83014a148c6e407cdc8422e9119a88b4220a1321b2986ea9aef63

df215a01f6a83014a148c6e407cdc8422e9119a88b4220a1321b2986ea9aef63

File hash published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

FILE1 SOURCE

SHA256 519cda9511738dfa6ad57a5716bd217d9c44af7023907711ddc76c4511f24d60

519cda9511738dfa6ad57a5716bd217d9c44af7023907711ddc76c4511f24d60

File hash published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

INDICATOR1 SOURCE

URL http://192.3.27.144/xampp/mpa/seemebestthingsevermeetgivenbestthingsfornewways.hta

Indicator published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

INDICATOR1 SOURCE

URL http://ip-api.com/line/?fields=hosting

Indicator published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

FILE1 SOURCE

SHA256 018648727f760e361eb4efa7f955a7815a197224c23016b321ab954767b45b82

018648727f760e361eb4efa7f955a7815a197224c23016b321ab954767b45b82

File hash published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

INDICATOR1 SOURCE

URL https://res.cloudinary.com/dnkr4s5yg/image/upload/v1735420882/givvuo2katk3jnggipgn.jpg

Indicator published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

INDICATOR1 SOURCE

URL https://s.deemos.com/6ruXkfgh?&sherry=strange&octagon=fragile&initiative=rough&corsage

Indicator published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

FILE1 SOURCE

SHA256 379fe2ae5a34b2349fe492b4318c589416c5cc8f1e54eb1502455863da17395e

379fe2ae5a34b2349fe492b4318c589416c5cc8f1e54eb1502455863da17395e

File hash published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

FILE1 SOURCE

SHA256 31f30a8b7270e00247b64c28cab661f23660c398d0da80b953e6587d58e4a429

31f30a8b7270e00247b64c28cab661f23660c398d0da80b953e6587d58e4a429

File hash published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

FILE1 SOURCE

SHA256 a666a99f2056082802f459f7180f891582a527324a16d34b4755ed63e5467882

a666a99f2056082802f459f7180f891582a527324a16d34b4755ed63e5467882

File hash published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

INDICATOR1 SOURCE

DOMAIN ftp.horeca-bucuresti.ro

Indicator published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

FILE1 SOURCE

SHA256 6071e54c8bad5762b8e10753fac7ea636970e2ab7fbe7f4c56b9f1b38fdcdbb4

6071e54c8bad5762b8e10753fac7ea636970e2ab7fbe7f4c56b9f1b38fdcdbb4

File hash published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

FILE1 SOURCE

SHA256 4b668425ec80d4ac34429924e11f7936deaf11289c24107dcf1e9c04c259f775

4b668425ec80d4ac34429924e11f7936deaf11289c24107dcf1e9c04c259f775

File hash published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

INDICATOR1 SOURCE

URL http://107.172.31.5/foeMMBIG.txt

Indicator published by the cited source.

malicious-activity

First reported 2025-01-11 05:00 UTCOpen evidence record

FILE1 SOURCE

SHA256 0f06f11ae1a611ff4a415aec1540aebe2d9ce3a27ef5acff426d97bea1c8202a

0f06f11ae1a611ff4a415aec1540aebe2d9ce3a27ef5acff426d97bea1c8202a

File hash published by the cited source.

malicious-activity

First reported 2024-04-08 19:41 UTCOpen evidence record

INDICATOR1 SOURCE

DOMAIN googleonlinee.com

Indicator published by the cited source.

malicious-activity

First reported 2024-04-08 19:41 UTCOpen evidence record

INDICATOR1 SOURCE

DOMAIN us.toromclk.com

Indicator published by the cited source.

malicious-activity

First reported 2024-12-04 02:32 UTCOpen evidence record

INDICATOR1 SOURCE

URL https://qqpplv2-secondary.z14.web.core.windows.net/werrx01USAHTML/?bcda=(0101)-84421-04568

Indicator published by the cited source.

malicious-activity

First reported 2024-12-04 02:32 UTCOpen evidence record

INDICATOR1 SOURCE

DOMAIN xml.staradsmedia.com

Indicator published by the cited source.

malicious-activity

First reported 2024-12-04 02:32 UTCOpen evidence record

INDICATOR1 SOURCE

DOMAIN oilrss03p01.club

Indicator published by the cited source.

malicious-activity

First reported 2024-12-04 02:32 UTCOpen evidence record

INDICATOR1 SOURCE

DOMAIN vanrss03p01.club

Indicator published by the cited source.

malicious-activity

First reported 2024-12-04 02:32 UTCOpen evidence record

Source labels and confidence are preserved. A filename or report mention alone does not establish that a file is malicious. Indicator observation dates describe the cited source; collection dates describe this catalog.