Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in
Get started About
User Guide
Log in Get started

Indicators of Compromise

477,770 total indicators across 20 types

SHA-256 Hash
TLP:CLEAR

5f22f4c4fdb36c4f0ea3248abb00521e39008c1fb4c97e1b4a9c7b9ef0b691c2

50% confidence

Added

2026-08-09

Domain
TLP:CLEAR

www.netivtech.org

50% confidence

Added

2026-08-09

IPv4 Address
TLP:CLEAR

162.255.119.28

50% confidence

Added

2026-08-09

IPv4 Address
TLP:CLEAR

77.91.74.235

50% confidence

Added

2026-08-09

IPv4 Address
TLP:CLEAR

91.195.240.19

50% confidence

Added

2026-08-09

IPv4 Address
TLP:CLEAR

104.21.81.7

50% confidence

Added

2026-08-09

IPv4 Address
TLP:CLEAR

194.11.246.78

50% confidence

Added

2026-08-09

Domain
TLP:CLEAR

netivtech.org

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

fmapp.exe

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

sentinelmemoryscanner.exe

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

client.exe

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

gshdoc.exe

50% confidence

Added

2026-08-09

IPv4 Address
TLP:CLEAR

143.198.5.41

50% confidence

Added

2026-08-09

Domain
TLP:CLEAR

netvigil.org

50% confidence

Added

2026-08-09

IPv4 Address
TLP:CLEAR

209.74.87.67

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

novaservice.exe

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

sh.exe

50% confidence

Added

2026-08-09

IPv4 Address
TLP:CLEAR

209.74.87.100

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

AnyDesk.exe

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

ticket.doc

50% confidence

Added

2026-08-09

Domain
TLP:CLEAR

codefusiontech.org

50% confidence

Added

2026-08-09

Domain
TLP:CLEAR

promoverse.org

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

burn.exe

50% confidence

Added

2026-08-09

Domain
TLP:CLEAR

UserForm1.TextBox1.Text

50% confidence

Added

2026-08-09

Domain
TLP:CLEAR

miniquest.org

50% confidence

Added

2026-08-09

Domain
TLP:CLEAR

ThisDocument.cls

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

FMAPP.exe

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

FMAPP.dll

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

mononoke.exe

50% confidence

Added

2026-08-09

URL
TLP:CLEAR

http://:4444/chromium_stealer_user.exe

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

Mononoke.exe

50% confidence

Added

2026-08-09

Filename
TLP:CLEAR

sysprocupdate.exe

50% confidence

Added

2026-08-09

IPv4 Address
TLP:CLEAR

159.198.36.115

50% confidence

Added

2026-08-09

Domain
TLP:CLEAR

screenai.online

50% confidence

Added

2026-08-09

Domain
TLP:CLEAR

MuddyWaterTEMP.Zagros

50% confidence

Added

2026-08-08

Domain
TLP:CLEAR

hospitalinstallation.com

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

Domain
TLP:CLEAR

hygienehistory.com

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

Domain
TLP:CLEAR

google.com.hospitalinstallation.com

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

URL
TLP:CLEAR

https://adserviceupdate.com/cac.aspx

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

URL
TLP:CLEAR

https://hygienehistory.com/cac.aspx

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

Domain
TLP:CLEAR

adserviceupdate.com

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

SHA-256 Hash
TLP:CLEAR

cbc9485db715e1b8cc384fe94b4cceadca4006cda8a5e28adc8848529cfafc93

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

SHA-256 Hash
TLP:CLEAR

ccf218189c3aadb1c761da14bfda3bae686769031e1e1b10007648bd72e34748

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

SHA-256 Hash
TLP:CLEAR

b630c96d3763182533d4fb9b614134382bd644cb02c6c1c3ade848b6ecc31e86

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

SHA-256 Hash
TLP:CLEAR

2cb1ad3b22db8e3666ea138fee88034a87a87cf43db3d3265a675ebf221379b0

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

SHA-256 Hash
TLP:CLEAR

30cb4679c4b8599eeb3d63a551716475c6332bdc4d4b4e3de0964aadb3092a10

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

SHA-256 Hash
TLP:CLEAR

5394d3b220de4695f731647e3a70545f951a8912ceb0c6585efab8d6842e8b42

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

SHA-256 Hash
TLP:CLEAR

541b1f417b9e42078c3355693a8a492b6a76048850f6549a429e0be99e6819cb

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

SHA-256 Hash
TLP:CLEAR

5dc08bda6919a57a85e5f38b857985fa71529ca39c8299868d5a49a987e19b18

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

SHA-256 Hash
TLP:CLEAR

7d586fb7f94182a8e2a0e53c7e4deb898066da029da5cd9972a94a59ca6d255a

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
75% confidence

Added

2026-07-12

Showing 1–50 of 89

Leaving Threaticon

This link opens an external site that isn't part of the platform.