Industrial Control Systems

Name: Industrial Control Systems
Creator: Maltiverse
Published: 2021-08-04

This feeds provides IOC's related to well known malware and threat actors that are normally interested in Industrial Sector plus specific malware families targeting these environments.

Author: agomez
Created: 2021-08-04 15:53:32
Last updated: 2024-04-09 16:57:15
Downloads: 718433
IPv4 indicators: 124
Hostname indicators: 12
URL indicators: 323
Sample indicators: 10725

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

pid.x86 Sample

modified 2026-10-18 06:17:43
Mirai (Triage) · Mirai (MalwareBazaar Abuse.ch)

b38400804f7b5b92.bin Sample

modified 2026-10-18 06:17:43
Xmrig_linux (Triage) · Mirai (MalwareBazaar Abuse.ch)

447d760691ca7859.bin Sample

modified 2026-10-18 06:17:43
Snowlight (Triage) · Mirai (MalwareBazaar Abuse.ch)

modified 2026-10-18 06:17:08
Suspicious Host (AbuseIPDB) · Unauthorized scanning of hosts (Blocklist.net.ua) · Malware Download (URLhaus Abuse.ch) · Mirai (ThreatFox Abuse.ch) · Port Scanner (AbuseIPDB)

f5a560e3b1a1f00d9b7361248efa77ebe51de4bd566205d4777e0ccd11de20a4 Sample

modified 2026-10-18 06:15:17
Mirai (Cyber Threat Alliance) · Generic Malware (Cyber Threat Alliance)

pid.mips Sample

modified 2026-10-18 06:10:42
Mirai (MalwareBazaar Abuse.ch)

pid.ppc64 Sample

modified 2026-10-18 06:10:28
Mirai (MalwareBazaar Abuse.ch)

mipsel Sample

modified 2026-10-18 06:10:25
Mirai (MalwareBazaar Abuse.ch)

pid.ppc Sample

modified 2026-10-18 06:10:23
Mirai (MalwareBazaar Abuse.ch)

mips Sample

modified 2026-10-18 06:10:21
Mirai (MalwareBazaar Abuse.ch)

93.41.182.232 IPv4

modified 2026-10-18 06:07:38
Mirai bot (Greynoise) · DDoS attack (Blocklist.net.ua) · Spam (IBM X-Force Exchange) · Scanning IPs (IBM X-Force Exchange) · Mail Spammer (Abuseat.org)

mipsel Sample

modified 2026-10-18 06:06:27
Mirai (MalwareBazaar Abuse.ch)

x86 Sample

modified 2026-10-18 06:06:25
Mirai (MalwareBazaar Abuse.ch)

pid.arm5 Sample

modified 2026-10-18 06:06:22
Mirai (MalwareBazaar Abuse.ch)

fpfid.football_nano.exe Sample

modified 2026-10-18 05:55:49
Generic Malware (Hybrid-Analysis) · Nanocore (Triage)

ascaris.arm7 Sample

modified 2026-10-18 05:45:38
Mirai (MalwareBazaar Abuse.ch)

sample-4d19c517cf60.exe Sample

modified 2026-10-18 05:45:04
Nanocore (Triage) · Generic Malware (Hybrid-Analysis)

569867b68976ee10.bin Sample

modified 2026-10-18 05:25:38
Mirai (MalwareBazaar Abuse.ch)

4fab1e4fe59ac690.bin Sample

modified 2026-10-18 05:25:04
Mirai (MalwareBazaar Abuse.ch) · Mirai (ThreatFox Abuse.ch)

bot.arm Sample

modified 2026-10-18 05:15:03
Mirai (Triage) · Mirai (MalwareBazaar Abuse.ch)

columbiaenvironmentallaw.org_nano.exe Sample

modified 2026-10-18 04:55:57
Generic Malware (Hybrid-Analysis) · Nanocore (Triage)

elite-api.su Hostname

modified 2026-10-18 04:40:39
MooBot (ThreatFox Abuse.ch) · Mirai (ThreatFox Abuse.ch)

sexforfun.xyz Hostname

modified 2026-10-18 04:40:36
Mirai (ThreatFox Abuse.ch)

dvrs.botlesscucks.st Hostname

modified 2026-10-18 04:39:53
Mirai (ThreatFox Abuse.ch)

polarisnetwork.fun Hostname

modified 2026-10-18 04:39:29
Mirai (Maltiverse Threat Observatory)

botnetdolly.zapto.org Hostname

modified 2026-10-18 04:39:19
Malware Download (URLhaus Abuse.ch) · Mirai (ThreatFox Abuse.ch)

srv.vlrt-gap.com Hostname

modified 2026-10-18 04:39:15
Mirai (ThreatFox Abuse.ch)

secure.kingdomplugin.nl Hostname

modified 2026-10-18 04:39:04
Mirai (ThreatFox Abuse.ch)

beca.ru Hostname

modified 2026-10-18 04:39:02
Mirai (ThreatFox Abuse.ch)

dvrhelper.anondns.net Hostname

modified 2026-10-18 04:38:55
Mirai (ThreatFox Abuse.ch)

muffins.chat Hostname

modified 2026-10-18 04:38:38
Mirai (ThreatFox Abuse.ch)

wsergoijnrjewgewr.duckdns.org Hostname

modified 2026-10-18 04:38:29
Mirai (ThreatFox Abuse.ch)

pub-06714264305c44ea94491c0c8d961a87.r2.dev Hostname

modified 2026-10-18 04:38:29
InvisibleFerret (ThreatFox Abuse.ch)

cncbot.ddns.net Hostname

modified 2026-10-18 04:37:48
Mirai (ThreatFox Abuse.ch)

repping.wordtheminer.com Hostname

modified 2026-10-18 04:37:41
Mirai (ThreatFox Abuse.ch)

cnc.monkesec.xyz Hostname

modified 2026-10-18 04:37:37
Mirai (ThreatFox Abuse.ch)

176.65.148.144.ptr.pfcloud.network Hostname

modified 2026-10-18 04:37:22
Mirai (ThreatFox Abuse.ch)

bot.zwntl.cn Hostname

modified 2026-10-18 04:37:19
Malware Download (URLhaus Abuse.ch) · Mirai (ThreatFox Abuse.ch)

fer1.duckdns.org Hostname

modified 2026-10-18 04:37:18
Mirai (ThreatFox Abuse.ch)

stoplooking.botlesscucks.st Hostname

modified 2026-10-18 04:37:18
Mirai (ThreatFox Abuse.ch)

loader.upmirai.club Hostname

modified 2026-10-18 04:36:45
Mirai (ThreatFox Abuse.ch)

hjfdjkahfkejw.chickenkiller.com Hostname

modified 2026-10-18 04:36:28
Mirai (ThreatFox Abuse.ch)

qelvhash.com Hostname

modified 2026-10-18 04:36:15
Mirai (ThreatFox Abuse.ch)

psy.hacler.ro Hostname

modified 2026-10-18 04:36:11
Mirai (ThreatFox Abuse.ch)

play.canvasviet.vn Hostname

modified 2026-10-18 04:35:40
Mirai (ThreatFox Abuse.ch)

online.upmirai.club Hostname

modified 2026-10-18 04:35:04
Mirai (ThreatFox Abuse.ch)

genddos.st Hostname

modified 2026-10-18 04:34:56
Mirai (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

convac123.duckdns.org Hostname

modified 2026-10-18 04:34:29
Mirai (ThreatFox Abuse.ch)

vm-tastingcollection1.i6m.nl Hostname

modified 2026-10-18 04:34:24
Mirai (ThreatFox Abuse.ch)

www.cbda.ru Hostname

modified 2026-10-18 04:33:44
Mirai (ThreatFox Abuse.ch)

anakkontolmemek.my.id Hostname

modified 2026-10-18 04:33:41
Mirai (ThreatFox Abuse.ch)

overloads.us.to Hostname

modified 2026-10-18 04:33:37
Mirai (ThreatFox Abuse.ch)

boatnet.ddns.net Hostname

modified 2026-10-18 04:33:36
Mirai (ThreatFox Abuse.ch) · Mirai (Maltiverse Threat Observatory)

nightslikethis.club Hostname

modified 2026-10-18 04:33:36
Mirai (ThreatFox Abuse.ch)

zyrec2.duckdns.org Hostname

modified 2026-10-18 04:33:31
Malware Download (URLhaus Abuse.ch) · Mirai (ThreatFox Abuse.ch) · Exploit.Kitmalware (Maltiverse Threat Observatory) · Exploit.agent (Maltiverse Threat Observatory) · Mirai (Maltiverse Threat Observatory)

bot.aarch64 Sample

modified 2026-10-18 04:31:38
Mirai (MalwareBazaar Abuse.ch)

4fab1e4fe59ac690.bin Sample

modified 2026-10-18 04:26:20
Mirai (MalwareBazaar Abuse.ch)

c24ae3aef86d4ce5.bin Sample

modified 2026-10-18 04:25:04
Snowlight (Triage) · Mirai (MalwareBazaar Abuse.ch) · Mirai (ThreatFox Abuse.ch)

bros.football_nano.exe Sample

modified 2026-10-18 03:56:43
Generic Malware (Hybrid-Analysis) · Nanocore (Triage)

95.214.27.201 IPv4

modified 2026-10-18 03:28:07
Malicious Host (HoneyDB) · Malicious URL (Hybrid-Analysis) · 2023-06-14 20:45:21 (URLhaus Abuse.ch) · 2023-06-14 20:45:22 (URLhaus Abuse.ch) · 2023-06-14 20:46:19 (URLhaus Abuse.ch)

43ee067ed40abe2c.bin Sample

modified 2026-10-18 03:25:04
Mirai (MalwareBazaar Abuse.ch) · Mirai (ThreatFox Abuse.ch)

na Sample

modified 2026-10-18 03:19:12
Prometei_elf (Triage) · Mirai (MalwareBazaar Abuse.ch)

042052c796e569d093f5d6ed758446d241f5b63bf13fc67ad01b45c1ec28e3e4 Sample

modified 2026-10-18 03:19:12
Suspicious Sample (Triage) · Mirai (MalwareBazaar Abuse.ch)

123.11.10.25 IPv4

modified 2026-10-18 03:18:02
Mail Spammer (Abuseat.org) · Mirai bot (Greynoise) · Malware Download (URLhaus Abuse.ch)

113.131.125.135 IPv4

modified 2026-10-18 03:17:35
Mirai bot (Greynoise) · Bots (IBM X-Force Exchange) · Scanning IPs (IBM X-Force Exchange) · Mail Spammer (Abuseat.org) · Malicious Host (Alienvault Ip Reputation Database)

0000.hikvision-cctv.su Hostname

modified 2026-10-18 03:15:18
Mirai (ThreatFox Abuse.ch)

85.215.45.36 IPv4

modified 2026-10-18 02:35:04
Malware Download (URLhaus Abuse.ch) · Mirai (ThreatFox Abuse.ch) · SSH Attacker (Blocklist.de) · Unknown malware (ThreatFox Abuse.ch)

https://qelvhash.com/dl/qelvminer-1.1.0-windows-x86_64.exe URL

modified 2026-10-18 02:31:08
Mirai (ThreatFox Abuse.ch)

SecuriteInfo.com.ELF.Downloader-DN.47975735 Sample

modified 2026-10-18 02:30:49
Mirai (MalwareBazaar Abuse.ch)

df603be289eb6d30.bin Sample

modified 2026-10-18 02:25:07
Xmrig_linux (Triage) · Mirai (MalwareBazaar Abuse.ch) · Mirai (ThreatFox Abuse.ch)

arm Sample

modified 2026-10-18 02:25:07
Xmrig_linux (Triage) · Mirai (MalwareBazaar Abuse.ch) · Mirai (ThreatFox Abuse.ch)

d8ab84932dddce52.bin Sample

modified 2026-10-18 02:25:07
Xmrig_linux (Triage) · Mirai (MalwareBazaar Abuse.ch) · Mirai (ThreatFox Abuse.ch)

d78b3ebdd20cca13.bin Sample

modified 2026-10-18 02:25:07
Xmrig_linux (Triage) · Mirai (MalwareBazaar Abuse.ch) · Mirai (ThreatFox Abuse.ch)

x86_64 Sample

modified 2026-10-18 02:25:07
Mirai (MalwareBazaar Abuse.ch) · Mirai (ThreatFox Abuse.ch)

113.131.200.2 IPv4

modified 2026-10-18 02:24:44
Telnet attacker (Greynoise) · Mirai bot (Greynoise) · Malicious Host (Alienvault Ip Reputation Database) · ET CINS Active Threat Intelligence Poor Reputation IP TCP (Emerging Threats) · Suspicious Host (AbuseIPDB)

jaffacakes118_77a65ac6c8f8d96d33cbbf2ca40a62581d88cb90d5714a281a661f232f788235.bin Sample

modified 2026-10-18 02:17:06
Mirai (Triage)

jaffacakes118_8accf2800d59ac2538b4cde8bfbfaa7edea05fc889c90cf2406b91c5bb08ed3b.bin Sample

modified 2026-10-18 02:17:00
Mirai (Triage)

jaffacakes118_a5821fb115fe22951ac85cc468334168fa0af98a5ee502b282a90986bfad65ab.bin Sample

modified 2026-10-18 02:16:55
Mirai (Triage)

dissmips Sample

modified 2026-10-18 01:45:51
Mirai (MalwareBazaar Abuse.ch)

95.214.27.183 IPv4

modified 2026-10-18 01:36:37
Malicious Host (HoneyDB) · Mail Spammer (Barracuda) · Mail Spammer (Abuseat.org) · Mirai (ThreatFox Abuse.ch) · Suspicious Host (AbuseIPDB)

205.185.118.82 IPv4

modified 2026-10-18 01:33:37
Mirai (ThreatFox Abuse.ch) · ET COMPROMISED Known Compromised or Hostile Host Traffic UDP (Emerging Threats) · ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (Emerging Threats) · IOC_19052020 (CronUp Threat Intel) · SSH Attacker (Maltiverse Research Team)