Malware Distribution

Name: Malware Distribution
Creator: Maltiverse
Published: 2022-01-14

Collection IoCs that are actively distributing malware. These endpoints are contacted to download following stages after exploitation phase.

Author: agomez
Created: 2022-01-14 08:44:34
Last updated: 2026-02-09 20:14:23
Downloads: 19241320
IPv4 indicators: 8656
Hostname indicators: 12771
URL indicators: 59650
Sample indicators: 380

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

bacon-rumors.xyz Hostname

modified 2026-10-17 11:33:09
Unknown Stealer (ThreatFox Abuse.ch) · Generic Malware (Maltiverse Threat Observatory)

recoverlostpassword.com Hostname

modified 2026-10-17 11:33:05
Program.Unwanted (Hybrid-Analysis) · Generic.Malware (Hybrid-Analysis) · Wacatac (Hybrid-Analysis) · Trojan.GenAsa (Hybrid-Analysis) · Malware (Hybrid-Analysis)

http://recoverlostpassword.com/downloads/firefox_password_recovery_trial.exe URL

modified 2026-10-17 11:33:05
Generic Malware (Maltiverse Threat Observatory) · Trojan.downloader (Maltiverse Threat Observatory)

1v1lolreloaded.com Hostname

modified 2026-10-17 11:32:58
rustystealer (Maltiverse Threat Observatory)

wattcruise.com Hostname

modified 2026-10-17 11:32:37
ClearFake (ThreatFox Abuse.ch) · Clearfake (Maltiverse Threat Observatory)

134.195.196.154 IPv4

modified 2026-10-17 11:32:18
Proxy (IPWhois.io) · Generic Malware (Maltiverse Threat Observatory) · VPN vpnsuper (Maltiverse Threat Observatory) · HTTP Spammer (StopForumSpam.com)

modified 2026-10-17 11:31:27
VPN (IPWhois.io) · Empty reason (Blocklist.net.ua) · Generic Malware (Maltiverse Threat Observatory) · VPN geonode (Maltiverse Threat Observatory) · HTTP Spammer (StopForumSpam.com)

getbrowser.sbs Hostname

modified 2026-10-17 11:30:46
fakeapp (Maltiverse Threat Observatory) · Coinminer (Maltiverse Threat Observatory)

116.196.150.180 IPv4

modified 2026-10-17 11:29:59
VPN geonode (Maltiverse Threat Observatory) · Proxy (IPWhois.io) · HTTP Spammer (StopForumSpam.com) · Generic Malware (Maltiverse Threat Observatory) · DDoS Attacker (Blocklist.net.ua)

https://bryanapps2.club/ URL

modified 2026-10-17 11:29:20
Phishing domain (Maltiverse Threat Observatory) · Generic Malware (Maltiverse Threat Observatory) · Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory)

www.roblox.com.ml Hostname

modified 2026-10-17 11:29:04
Malicious URL (Triage) · Suspicious URL (Triage) · Phishing (OpenPhish) · Phishing (Phishtank) · Generic Malware (Maltiverse Threat Observatory)

https://www.metalgas.com.ar/wp-includes/js/jquery/jquery.js URL

modified 2026-10-17 11:28:29
Trojan.downloader (Maltiverse Threat Observatory)

www.metalgas.com.ar Hostname

modified 2026-10-17 11:28:29
Malicious url (Twitter) · Malware Download (URLhaus Abuse.ch) · Trojan.downloader (Maltiverse Threat Observatory)

https://www.metalgas.com.ar/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp URL

modified 2026-10-17 11:28:29
Trojan.downloader (Maltiverse Threat Observatory)

almacenesjosepuebla.com Hostname

modified 2026-10-17 11:27:42
Unknown malware (ThreatFox Abuse.ch) · Generic Malware (Maltiverse Threat Observatory) · Unknown Loader (ThreatFox Abuse.ch)

http://hidoctor.com.br/download/dabr_acrobat.exe URL

modified 2026-10-17 11:27:26
Trojan.dropper.win32 (Maltiverse Threat Observatory)

hidoctor.com.br Hostname

modified 2026-10-17 11:27:26
Generic Malware (Maltiverse Threat Observatory) · Top Popularity Site (Tranco) · Trojan.dropper.win32 (Maltiverse Threat Observatory)

http://www.yinglunkezhan.com/images/default/menu.js URL

modified 2026-10-17 11:27:19
Trojan.js.generic (Maltiverse Threat Observatory)

http://www.yinglunkezhan.com/images/default/select_menu.js URL

modified 2026-10-17 11:27:19
Trojan.js.generic (Maltiverse Threat Observatory)

http://www.yinglunkezhan.com/images/default/xunlei.js URL

modified 2026-10-17 11:27:19
Trojan.js.generic (Maltiverse Threat Observatory)

http://www.yinglunkezhan.com/images/default/player.js URL

modified 2026-10-17 11:27:19
Trojan.js.generic (Maltiverse Threat Observatory)

http://www.yinglunkezhan.com/images/default/jquery-1.2.6.min.js URL

modified 2026-10-17 11:27:19
Trojan.js.generic (Maltiverse Threat Observatory)

http://www.yinglunkezhan.com/images/default/label.js URL

modified 2026-10-17 11:27:19
Trojan.js.generic (Maltiverse Threat Observatory)

http://www.yinglunkezhan.com/images/default/cookie.js URL

modified 2026-10-17 11:27:18
Trojan.js.generic (Maltiverse Threat Observatory)

www.yinglunkezhan.com Hostname

modified 2026-10-17 11:27:18
Trojan.js.generic (Maltiverse Threat Observatory)

https://lnk.ink/apple.in.com URL

modified 2026-10-17 11:27:16
Generic Malware (Maltiverse Threat Observatory) · Phishing (Maltiverse Threat Observatory) · Phishing (Phishtank)

lnk.ink Hostname

modified 2026-10-17 11:27:15
6122513fd26de6fa7189ad1432cdc9af8aeb1a4fcd6edfdb3003366847a502b8 (Maltiverse Threat Observatory) · Malware hash 6122513fd26de6fa7189ad1432cdc9af8aeb1a4fcd6edfdb3003366847a502b8 (Maltiverse Threat Observatory) · Top Popularity Site (Cisco Umbrella) · Malicious URL (Triage) · Malicious behavior (Maltiverse Threat Observatory)

https://ytube2dl.com/getData.js URL

modified 2026-10-17 11:26:56
Trojan.generic (Maltiverse Threat Observatory)

ytube2dl.com Hostname

modified 2026-10-17 11:26:56
Alexa Top 1 Million (Alexa) · Malicious URL (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella) · Trojan.generic (Maltiverse Threat Observatory)

f91af95dad6ae29fd7c1b25e353f826cf144cc308a8eb5f4eaff73b86464d670 Sample

modified 2026-10-17 11:26:27
Generic Malware (Maltiverse Threat Observatory)

kortex.gd Hostname

modified 2026-10-17 11:26:27
Generic Malware (Maltiverse Threat Observatory)

http://starspie.com/wp-content/uploads/2022/06/zuhhar.pdf URL

modified 2026-10-17 11:26:23
Trojan.pdf (Maltiverse Threat Observatory)

https://greentechreviews.ru/wp-content/uploads/2016/01/RunMemTest-Pro-v2.5.zip URL

modified 2026-10-17 11:26:23
Trojan.generic (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/Fantasy_Grounds__Mythic_Monsters_31_Daemons_PFRPG_Crack_Keygen__Activ... URL

modified 2026-10-17 11:26:23
Trojan.downloader (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/08/Visual_Paradigm_For_Uml_Crack_Keys_HOT.pdf URL

modified 2026-10-17 11:26:23
Malicious.PDF (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/06/USB_Virus_Scan_V24_Username_And_License_Code.pdf URL

modified 2026-10-17 11:26:23
Trojan.generic (Maltiverse Threat Observatory)

greentechreviews.ru Hostname

modified 2026-10-17 11:26:23
Trojan.generic (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/Elden_Ring_Crack__Serial_Number__v_102__DLC_Patch_With_Serial_Key_Fre... URL

modified 2026-10-17 11:26:21
Malicious.PDF (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/xylyisr.pdf URL

modified 2026-10-17 11:26:21
Malicious.PDF (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/09/Altered_Carbon_S01_WEBRip_264_PBSettv_Torrent_Download.pdf URL

modified 2026-10-17 11:26:21
Malicious.PDF (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/Kernel_For_Word__File_Repair_Software_Crackl.pdf URL

modified 2026-10-17 11:26:21
PDF.maliciousmalware (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/06/Windows_Embedded_81_Industry_Pro_x64_PT_BR_Original_MSDN_dow.pdf URL

modified 2026-10-17 11:26:21
Trojan.pdf (Maltiverse Threat Observatory)

http://starspie.com/wp-content/uploads/2022/06/sanddar.pdf URL

modified 2026-10-17 11:26:21
Malicious.PDF (Maltiverse Threat Observatory)

http://starspie.com/wp-content/uploads/2022/06/rebbet.pdf URL

modified 2026-10-17 11:26:21
PDF.maliciousmalware (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/06/comedycentralroastdonaldtrumpsubtitulado.pdf URL

modified 2026-10-17 11:26:21
Trojan.generic (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/elesar.pdf URL

modified 2026-10-17 11:26:21
PDF.maliciousmalware (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/bemimel.pdf URL

modified 2026-10-17 11:26:20
Malicious.PDF (Maltiverse Threat Observatory)

http://starspie.com/wp-content/uploads/2022/06/prowyld.pdf URL

modified 2026-10-17 11:26:20
Trojan.pdf (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/TOP_Download_Cryea_Dll_For_Crysis_3.pdf URL

modified 2026-10-17 11:26:20
Malicious.PDF (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/Wattogameextractorfullversion_Free.pdf URL

modified 2026-10-17 11:26:20
Malicious.PDF (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/AutoCAD_Free_Download.pdf URL

modified 2026-10-17 11:26:20
Malicious.PDF (Maltiverse Threat Observatory)

http://starspie.com/wp-content/uploads/2022/07/yellow_gradient_photoshop_download.pdf URL

modified 2026-10-17 11:26:20
Alien (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/AutoCAD_Crack__For_PC_Final_2022-1.pdf URL

modified 2026-10-17 11:26:20
Malicious.PDF (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/carceli.pdf URL

modified 2026-10-17 11:26:20
Malicious.PDF (Maltiverse Threat Observatory)

http://starspie.com/wp-content/uploads/2022/08/Rbx_Gold_Free_Robux_Free_April2022.pdf URL

modified 2026-10-17 11:26:20
Malicious.PDF (Maltiverse Threat Observatory)

http://starspie.com/wp-content/uploads/2022/06/Kaspersky_Internet_Security_2016_Key_Generator_NEW.pdf URL

modified 2026-10-17 11:26:20
PDF.maliciousmalware (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/raqgasc.pdf URL

modified 2026-10-17 11:26:19
Trojan.generic (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/09/DroidCam_Wireless_Webcam_Apk_Mod_EXCLUSIVE.pdf URL

modified 2026-10-17 11:26:19
Malicious.PDF (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/06/mantryl.pdf URL

modified 2026-10-17 11:26:19
PDF.maliciousmalware (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/egbkee.pdf URL

modified 2026-10-17 11:26:19
Malicious.PDF (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/09/Revit_2016_32_bit_crack_torrent_download.pdf URL

modified 2026-10-17 11:26:19
Phishing.artifact.pdf (Maltiverse Threat Observatory)

http://starspie.com/wp-content/uploads/2022/06/quantitative_techniques_in_management_nd_vohra_pdf_free_down.pdf URL

modified 2026-10-17 11:26:19
Malicious.PDF (Maltiverse Threat Observatory)

http://starspie.com/wp-content/uploads/2022/06/guntalme.pdf URL

modified 2026-10-17 11:26:19
Trojan.pdf (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/HOT_Download_Teorija_Zavere_Pdf_Dejan_22.pdf URL

modified 2026-10-17 11:26:19
Malicious.PDF (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/lavmak.pdf URL

modified 2026-10-17 11:26:19
Malicious.PDF (Maltiverse Threat Observatory)

https://starspie.com/wp-content/uploads/2022/07/Download_FULL_Zero_Hour_Reborn_The_Last_Stand_V50_Rar.pdf URL

modified 2026-10-17 11:26:19
Malicious.PDF (Maltiverse Threat Observatory)