ClearFake

Malware Family

7,789 indicators of compromise attributed to ClearFake across abuse.ch threat intelligence feeds.

Domains

7,246

IPs

25

URLs

34

Hashes

484

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

lanhoppath.openapiservicex.picsdomainunx7.swimsuit-unable.latdomaindnmjqvy.trmegapari.comdomaincybernetic-prosthetic-lab.gardendomainxb.bet1bonus.comdomainwzpmw.webrevelem.hudomain1djqvowq.iaap2019.comdomaintinyshart.comdomainvrfimgjs.clickdomainqfjwyksn.jadoobet.infodomainbet1betyek.betdomainkevwo.akonyvelod.hudomainsctawfw.1xgame.gamesdomainbnsclod.beerdomainoynxty.kovacsago.comdomainfast-zeit-2.vortex-sys.in.netdomainoakbalancer.setqueueat.latdomain39cif89o.rayegan.netdomainpqycltd.hokm.casinodomainretro-gaming-launcher.gardendomain89.124.109.242ip45.155.69.173ip65.109.115.111ip178.16.53.219ip193.233.82.126ip178.16.53.232ip178.16.55.92ip45.94.47.129ip103.141.13.26ip194.76.227.172ip2.27.5.153ip77.239.114.108ip94.154.35.157ip188.119.122.123ip153.75.90.37ip153.75.90.64ip153.75.90.66ip153.75.90.67ip94.154.35.153ip178.16.52.101iphttps://jnyut.zsatom.hu/b0095332-c29a-441b-a6a2-997df8e339e7/goog.cturlhttps://cdn.jsdelivr.net/gh/arinao7/6e91d58f-acdf/keyurlhttps://cdn.jsdelivr.net/gh/galinavsuk6/text-set/vdrurlhttps://gardeninfrastructurecore.garden/80ad8f13-a651-414f-8be5-0252e6fd5ad0/ggl.bscurlhttp://198.13.158.127:5506/dd.vbsurlhttps://cdn.jsdelivr.net/gh/galinavsuk6/fjhg-567/humurlhttps://flzocge.penality.bet/083442ba-5bf1-4cc5-8440-04740f3ca9be/urlhttps://cdn.jsdelivr.net/gh/arinao7/8327ac99-c06c-422f-bd2e-4a80978d52c9/api-45urlhttps://cdn.jsdelivr.net/gh/louis-mellor/2d-aee4-1433332c1@main/f5urlhttps://telegram.me/nwwfh8urlhttps://cdn.jsdelivr.net/gh/galinavsuk6/fjhg-567/hm-354urlhttps://steamcommunity.com/profiles/76561198719385745urlhttps://cdn.jsdelivr.net/gh/savina-41/r4240-98d7-bc2c@main/fe3burlhttps://cdn.jsdelivr.net/gh/galinavsuk6/sdg7-j9/r-fd7urlhttp://wer.cache-processing-node.com/etcurlhttps://cdn.jsdelivr.net/gh/savina-41/4240-98d7-bc2c@main/fe3burlhttp://91.92.242.243:6600/ESPIxN5lducyZQW5we\urlhttps://cdn.jsdelivr.net/gh/savina-41/8a-96dfe89a4aa3/hum-id46urlhttps://rpc-cloud.beer/api/urlhttps://cdn.jsdelivr.net/gh/arinao7/86227780-d251hllgurl