IClickFix

Malware Family

2 987 indicators of compromise attributed to IClickFix across abuse.ch threat intelligence feeds.

Domains

2 837

IPs

24

URLs

121

Hashes

5

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (2 837)IPs (24)URLs (121)Hashes (5)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
securelearn.codomain
herbalsolutions.co.zadomain
thanhvuvp.comdomain
tydesign.co.zadomain
cream.ac.ukdomain
toyama-housenavi.netdomain
varalearning.indomain
gascreative.comdomain
herbalspainc.comdomain
greenthicket.orgdomain
magranite.co.ukdomain
ccrat.comdomain
hedy.dedomain
beautyfev.lifedomain
stg-batrice-blwstaging.kinsta.clouddomain
microsoftgeek.comdomain
laclemanccz.comdomain
634312.us27.myftpupload.comdomain
rainsounds.usdomain
wellthyco.comdomain
85.239.149.16ip
4.144.235.121ip
156.234.7.21ip
91.92.34.76ip
178.16.52.232ip
91.92.241.6ip
91.92.241.182ip
91.92.240.121ip
91.92.240.117ip
162.243.87.175ip
151.243.113.89ip
176.65.144.108ip
167.148.195.30ip
151.240.151.158ip
85.209.132.130ip
85.239.144.81ip
94.26.90.23ip
185.242.245.69ip
147.45.71.191ip
158.94.208.87ip
https://maxintora.com/lampasurl
https://amlfoods.co.uk/wp-blog-footer.phpurl
https://vdscfvgdfggg.com/totoalla.jsurl
http://64.188.91.240/otks5.wavurl
https://bunesaria.com/kiskaurl
https://djasdajnsdnjgjg.com/tasffff.jsurl
http://cloflart.com/at.7zurl
https://djasdajnsdnjgjg.com/sdfgbbb.jsurl
http://95.164.53.115:5506/do.vbsurl
https://opsmiskop.comurl
https://primetimehost.me/ama.php?page=url
https://gemini-console.com/install.ps1url
http://176.65.144.108/i88.txturl
https://cloudfeeld.com/checkurl
http://103.27.156.206/most.pdfurl
https://losfiros.comurl
https://serenevacation.com/wp-links-piss.phpurl
https://djasdajnsdnjgjg.com/sdkfgi.jsurl
http://cloflart.com/7z.dllurl
http://cloflart.com/7z.exeurl