IoCs

Sophos-originated indicators-of-compromise from published reports

                                                       /@&&@#        *(#(*.                                                                                
                                                       @(  *@    %@%,     ./&@@&*@@@@                                                                      
                                            (@@(      @%&@@&   .@,              @.  *@                                                                     
                                           @%  #@    &&        %@               .@@@@.                                                                     
                                         &@&@//@&    @/         @#                                                                                         
                                       @@            *@          %@.        ,%@@@@@@@@@&/  .,                                                              
                                     @%                @@          *@@,&@@#              ,@  .@.                                                           
                                   (@             (#,    @&        ,@@#@@&               .@   @*                                                           
                                  .@.           #@  .@     #@&   @@.       %@@%            ./. (@,                                                         
                                  #&            &@  /@        %@@,             *&@%&@@&          @*                                                        
                                  *@         .@%   .     %@(#@#   &@@,            @,  ,@          @.                                                       
                                   @%       /@           @.  (@      ,@@&.        /@%#@@*         (@                                                       
                                    &@      @.            &@@%            %@@#          #@         @*                                                      
                                     .@%    @#                                %@@        *@        @(                                                      
                                        (@@, @&               .@@%@#             /@#      @/       @,                                                      
                                            /&@@@@@@@@@@@@@@@@@(   @@@@@@@&*       *@(    @,      #@                                                       
                                                  %@@&*        &@@@         ,@@.     %@  @#   *(**@                                                        
                                                       *%@@@@&(.               &@     %@@   .@. .@.                                                        
                                                                 .#@@@(         .@ .&@*@#   .@. .@.                                                        
                                                                       %@&       &@#   @&@@&* *#*                                                          
                                                                          &@.  %@%@  &@@(                                                                  
            .@@@@@@@      ((((((  /(((/  (((((/  (   (/  /(((*  /(((((.    .@*@% #@@& %&                                                                   
            .@@@@@@@     /(      (/   /( (/   (/ (   (/.(,   ((,(.           @/  @%  @%                                                                    
            .@@@@@@@          /( (*   /( (((((/  (...(/.(,   ((     .(,     (@# @@ /@,                                                                     
            .@@@@@@@     *((((((  (((((  (/      (   (/  ((((( .((((((      @@&%@@#@                                                                       
            .@@@@@@@                                                        @@&@@%@                                                                        
            .@@@@@@@                                                        @@@@@@@                                                                        
            .@@@@@@@                                                        @@@@@@@                                                                        
            .@@@@@@@                      /@@@@@@@@@@@@@&*                  @@@@@@@    .#@@@@@@@@@@@@@%                       &@@@@@@@@@@@*                
            .@@@@@@@                   @@@@@@@@@@@@@@@@@@@@@&               @@@@@@@ ,@@@@@@@@@@@@@@@@@@@@@*                %@@@@@@@@@@@@@@@@@#             
            .@@@@@@@                (@@@@@@@@@@@@@@@@@@@@@@@@@@,            @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@            .@@@@@@@@@@@@@@@@@@@@,            
            .@@@@@@@              ,@@@@@@@@@@@%*.  .*%@@@@@@@@@@@           @@@@@@@@@@@@@@@,   .#@@@@@@@@@@@&          @@@@@@@@.    /@@@@@@              
            .@@@@@@@             &@@@@@@@@/              #@@@@@@@@#         @@@@@@@@@@@@.              @@@@@@@@@,       #@@@@@@.          %.               
            .@@@@@@@            &@@@@@@@(                  %@@@@@@@#        @@@@@@@@@@                   @@@@@@@@.      %@@@@@@,                           
            .@@@@@@@           &@@@@@@@                      @@@@@@@#       @@@@@@@@%                     #@@@@@@@      .@@@@@@@@/                         
            .@@@@@@@           @@@@@@@                        @@@@@@@       @@@@@@@%                       &@@@@@@#      /@@@@@@@@@@&,                     
            .@@@@@@@          #@@@@@@#                        &@@@@@@,      @@@@@@@                         @@@@@@@        &@@@@@@@@@@@@@%                 
            .@@@@@@@          %@@@@@@,                        #@@@@@@(      @@@@@@@                         @@@@@@@           &@@@@@@@@@@@@@%              
            .@@@@@@@          #@@@@@@#                        &@@@@@@(      @@@@@@@                         @@@@@@@               #@@@@@@@@@@@%            
            .@@@@@@@          .@@@@@@@                        @@@@@@@(      #@@@@@@(                       #@@@@@@%                   /@@@@@@@@&           
            .@@@@@@@           @@@@@@@&                      @@@@@@@@(       @@@@@@@#                     /@@@@@@@                       &@@@@@@#          
            .@@@@@@@            @@@@@@@@                   ,@@@@@@@@@(       *@@@@@@@&                   %@@@@@@@/                        @@@@@@&          
             @@@@@@@%            @@@@@@@@@.              *@@@@@@@@@@@(        ,@@@@@@@@&               &@@@@@@@@/           (&           #@@@@@@(          
             @@@@@@@@@/           %@@@@@@@@@@#       .%@@@@@@@@@@@@@@(          @@@@@@@@@@@*       *&@@@@@@@@@@           *@@@@@%      %@@@@@@@&           
              @@@@@@@@@@@@          &@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@(           .@@@@@@@@@@@@@@@@@@@@@@@@@@@.          .@@@@@@@@@@@@@@@@@@@@@%            
               %@@@@@@@@@@            #@@@@@@@@@@@@@@@@@@@@@@/*@@@@@@(              &@@@@@@@@@@@@@@@@@@@@@&               &@@@@@@@@@@@@@@@@@@              
                  &@@@@@@@                &@@@@@@@@@@@@@@%    *@@@@@@(                 /&@@@@@@@@@@@@@@*                     %@@@@@@@@@@@@.                
                       .,,

Name	Name	Last commit message	Last commit date
Latest commit packetrat Add files via upload Apr 1, 2025 b1fce4d · Apr 1, 2025 History 848 Commits
2023-08-25 Citrix CVE-2023-3519 attacks.csv	2023-08-25 Citrix CVE-2023-3519 attacks.csv	Update 2023-08-25 Citrix CVE-2023-3519 attacks.csv	Aug 30, 2023
2023-10-ColdFusion-ransomware-IOCs.csv	2023-10-ColdFusion-ransomware-IOCs.csv	Add files via upload	Oct 18, 2023
2023-12 Akira followup.csv	2023-12 Akira followup.csv	Add files via upload	Dec 22, 2023
2024-02_Payloads_associated_with_ScreenConnect_attacks.csv	2024-02_Payloads_associated_with_ScreenConnect_attacks.csv	Update 2024-02_Payloads_associated_with_ScreenConnect_attacks.csv	Feb 27, 2024
20250205_SVGspam.csv	20250205_SVGspam.csv	Add files via upload	Feb 5, 2025
2309 Tiny Turla backdoor.csv	2309 Tiny Turla backdoor.csv	Update 2309 Tiny Turla backdoor.csv	Oct 6, 2023
2310 CVE-2023-40044 wsftp ransomware.csv	2310 CVE-2023-40044 wsftp ransomware.csv	Add files via upload	Oct 18, 2023
2311 Vice Society - Rhysida IoCs.csv	2311 Vice Society - Rhysida IoCs.csv	Update 2311 Vice Society - Rhysida IoCs.csv	Nov 13, 2023
2404 impersonation campaign.csv	2404 impersonation campaign.csv	Add files via upload	Apr 26, 2024
3CX IoCs 2023-03.csv	3CX IoCs 2023-03.csv	Add files via upload	Mar 30, 2023
3proxy-backdoor-IOCs.csv	3proxy-backdoor-IOCs.csv	Add files via upload	Apr 9, 2024
ATK-Brutel.csv	ATK-Brutel.csv	Add files via upload	May 18, 2023
Andr-FakeApp.csv	Andr-FakeApp.csv	Update Andr-FakeApp.csv	Mar 16, 2022
Android-HiddAd-T	Android-HiddAd-T	Update Android-HiddAd-T	Feb 21, 2019
Android-fauxanticovid.csv	Android-fauxanticovid.csv	Add files via upload	Dec 18, 2020
Android-pakchat.csv	Android-pakchat.csv	Update Android-pakchat.csv	Jan 12, 2021
Android_C23-spyware.csv	Android_C23-spyware.csv	Add files via upload	Nov 23, 2021
Atomic-infostealer-IOCs.csv	Atomic-infostealer-IOCs.csv	Add files via upload	Sep 6, 2024
CVE-2018-0798 RTFs	CVE-2018-0798 RTFs	Create CVE-2018-0798 RTFs	Jul 31, 2019
CVE-2022-26134_attacks.csv	CVE-2022-26134_attacks.csv	Add files via upload	Jun 16, 2022
CVE-2022-3236_IOCs.csv	CVE-2022-3236_IOCs.csv	Update CVE-2022-3236 _IOCs.csv	Oct 19, 2022
CloudChat-IOCs.csv	CloudChat-IOCs.csv	Add files via upload	Oct 6, 2023
Cryptorom_fakeapps_2.csv	Cryptorom_fakeapps_2.csv	Update Cryptorom_fakeapps_2.csv	Aug 3, 2023
DLLsideloading-PlugX-USBworm-2023-03.csv	DLLsideloading-PlugX-USBworm-2023-03.csv	Add files via upload	Mar 14, 2023
FlowerStormPaaS.csv	FlowerStormPaaS.csv	Update FlowerStormPaaS.csv	Dec 19, 2024
Follina_CVE-2022-30190_hashes.csv	Follina_CVE-2022-30190_hashes.csv	Update Follina_CVE-2022-30190 _hashes.csv	Jun 10, 2022
FoolsGoldMetaTraderShaZhuPan.csv	FoolsGoldMetaTraderShaZhuPan.csv	Update FoolsGoldMetaTraderShaZhuPan.csv	Feb 13, 2023
IOC-sheet_gootloader2025.csv	IOC-sheet_gootloader2025.csv	Add files via upload	Jan 16, 2025
IOC_imagespam.csv	IOC_imagespam.csv	Add files via upload	Aug 9, 2023
IOC_quishing2024.csv	IOC_quishing2024.csv	Add files via upload	Oct 16, 2024
Iranian-banking-malware.csv	Iranian-banking-malware.csv	Add files via upload	Jul 27, 2023
Karma_Conti_joint_IOCs.csv	Karma_Conti_joint_IOCs.csv	Add files via upload	Mar 1, 2022
MAILBOMB-TEAMS-RANSOMWARE.csv	MAILBOMB-TEAMS-RANSOMWARE.csv	Update MAILBOMB-TEAMS-RANSOMWARE.csv	Jan 21, 2025
Mal-BadNode.csv	Mal-BadNode.csv	Update Mal-BadNode.csv	Oct 25, 2021
Mal-EncPk-APV_IOCs.csv	Mal-EncPk-APV_IOCs.csv	Add files via upload	Jun 17, 2021
Malspam-OtoGonderici	Malspam-OtoGonderici	Update Malspam-OtoGonderici	Jul 15, 2019
Malware-SystemBC.csv	Malware-SystemBC.csv	Add files via upload	Dec 16, 2020
Miner-Mrbminer.csv	Miner-Mrbminer.csv	Add files via upload	Jan 21, 2021
Miner-Tor2Mine.csv	Miner-Tor2Mine.csv	Update Miner-Tor2Mine.csv	Dec 1, 2021
MoDi-RAT-reflective-injection.csv	MoDi-RAT-reflective-injection.csv	Add files via upload	Sep 24, 2020
Nitrogen 2023-07.csv	Nitrogen 2023-07.csv	Add files via upload	Jul 26, 2023
OWASSRF IOCs 2023-03.csv	OWASSRF IOCs 2023-03.csv	Add files via upload	Mar 16, 2023
PJobRAT_IOCs.csv	PJobRAT_IOCs.csv	Add files via upload	Mar 27, 2025
PUA-QuickCPU_xmr-stak.csv	PUA-QuickCPU_xmr-stak.csv	Add files via upload	Apr 13, 2021
Pacific_Rim_Asnarok_iocs.csv	Pacific_Rim_Asnarok_iocs.csv	Add files via upload	Oct 31, 2024
Pacific_Rim_CVE-2020-15069_IOCs.csv	Pacific_Rim_CVE-2020-15069_IOCs.csv	Add files via upload	Oct 31, 2024
Pacific_Rim_Covert_Channels_IOCs.csv	Pacific_Rim_Covert_Channels_IOCs.csv	Add files via upload	Oct 31, 2024
Pacific_Rim_Cyberoam_acct_IOCs.csv	Pacific_Rim_Cyberoam_acct_IOCs.csv	Add files via upload	Oct 31, 2024
Pacific_Rim_Defending_Forward_IOCs.csv	Pacific_Rim_Defending_Forward_IOCs.csv	Add files via upload	Oct 31, 2024
Pacific_Rim_Personal_Panda_IOCs.csv	Pacific_Rim_Personal_Panda_IOCs.csv	Update Pacific_Rim_Personal_Panda_IOCs.csv	Nov 4, 2024
Pacific_Rim_Under_The_Radar_IOCs.csv	Pacific_Rim_Under_The_Radar_IOCs.csv	Add files via upload	Oct 31, 2024
Qakbot-onenote-attacks.csv	Qakbot-onenote-attacks.csv	Add files via upload	Feb 7, 2023
README.md	README.md	Update README.md	Feb 13, 2019
Ransom-Lockbit_20220412.csv	Ransom-Lockbit_20220412.csv	Add files via upload	Jun 30, 2022
Ransomware-AstroLocker.csv	Ransomware-AstroLocker.csv	Add files via upload	Mar 31, 2021
Ransomware-BlackByte.csv	Ransomware-BlackByte.csv	Add files via upload	Oct 4, 2022
Ransomware-Conti.csv	Ransomware-Conti.csv	Add files via upload	Feb 16, 2021
Ransomware-Dharma-RaaS.csv	Ransomware-Dharma-RaaS.csv	Update Ransomware-Dharma-RaaS.csv	Aug 12, 2020
Ransomware-Dharma-console-history-toolbelt-script.txt	Ransomware-Dharma-console-history-toolbelt-script.txt	Add files via upload	Aug 14, 2020
Ransomware-Egregor.csv	Ransomware-Egregor.csv	Add files via upload	Feb 26, 2021
Ransomware-EpsilonRed.csv	Ransomware-EpsilonRed.csv	Add files via upload	May 28, 2021
Ransomware-LockBit	Ransomware-LockBit	Update Ransomware-LockBit	Apr 24, 2020
Ransomware-LockBit.csv	Ransomware-LockBit.csv	Add files via upload	Oct 26, 2020
Ransomware-Lockbit3-IOCs.csv	Ransomware-Lockbit3-IOCs.csv	Add files via upload	Nov 30, 2022
Ransomware-Matrix	Ransomware-Matrix	Create Ransomware-Matrix	Jan 23, 2019
Ransomware-Maze.csv	Ransomware-Maze.csv	Add files via upload	Sep 17, 2020
Ransomware-MegaCortex	Ransomware-MegaCortex	Create Ransomware-MegaCortex	May 10, 2019
Ransomware-Midas.csv	Ransomware-Midas.csv	Add files via upload	Jan 25, 2022
Ransomware-MountLocker.csv	Ransomware-MountLocker.csv	Add files via upload	Mar 31, 2021
Ransomware-Netfilim.csv	Ransomware-Netfilim.csv	Update Ransomware-Netfilim.csv	Jan 26, 2021
Ransomware-Netwalker	Ransomware-Netwalker	Create Ransomware-Netwalker	May 27, 2020
Ransomware-Play.csv	Ransomware-Play.csv	Update Ransomware-Play.csv	Jan 12, 2023
Ransomware-ProLock.csv	Ransomware-ProLock.csv	Update Ransomware-ProLock.csv	Jul 24, 2020
Ransomware-Qilin-STAC4365.csv	Ransomware-Qilin-STAC4365.csv	Add files via upload	Apr 1, 2025
Ransomware-REvil-Kaseya.csv	Ransomware-REvil-Kaseya.csv	Add files via upload	Jul 5, 2021
Ransomware-Ryuk.csv	Ransomware-Ryuk.csv	Update Ransomware-Ryuk.csv	Oct 14, 2020
Ransomware-Snatch	Ransomware-Snatch	Update Ransomware-Snatch	Dec 18, 2019
Ransomware_BlackCat - triple ransomware attack.csv	Ransomware_BlackCat - triple ransomware attack.csv	Add files via upload	Aug 10, 2022
Ransomware_BlackKingDom.csv	Ransomware_BlackKingDom.csv	Add files via upload	Mar 23, 2021
Ransomware_DearCry.csv	Ransomware_DearCry.csv	Rename ransomware_dearcry.csv to Ransomware_DearCry.csv	Mar 15, 2021
Ransomware_Hive - triple ransomware attack.csv	Ransomware_Hive - triple ransomware attack.csv	Add files via upload	Aug 10, 2022
Ransomware_Lockbit - triple ransomware attack.csv	Ransomware_Lockbit - triple ransomware attack.csv	Add files via upload	Aug 10, 2022
Ransomware_Prolock_services_stopped.csv	Ransomware_Prolock_services_stopped.csv	Add files via upload	Jul 27, 2020
Ransomware_prolock_processes_stopped.csv	Ransomware_prolock_processes_stopped.csv	Add files via upload	Jul 27, 2020
STAC1807_June_update.csv	STAC1807_June_update.csv	Add files via upload	Jun 26, 2024
STAC6451_IOCs.csv	STAC6451_IOCs.csv	Add files via upload	Aug 7, 2024
ShaZhuPanfakeapps.csv	ShaZhuPanfakeapps.csv	Update ShaZhuPanfakeapps.csv	Mar 1, 2023
Stealer-Baldr	Stealer-Baldr	baldr-ioc	Aug 7, 2019
Sunburst_blocklists.csv	Sunburst_blocklists.csv	Add files via upload	Dec 21, 2020
Troj-Agent-BKJE.csv	Troj-Agent-BKJE.csv	Add files via upload	Dec 19, 2023
Troj-AgentTesla.csv	Troj-AgentTesla.csv	Add files via upload	Feb 2, 2021
Troj-BazarBackdoor.csv	Troj-BazarBackdoor.csv	Add files via upload	Nov 11, 2021
Troj-BazarLd.csv	Troj-BazarLd.csv	Add files via upload	Apr 15, 2021
Troj-BuerLd-A.csv	Troj-BuerLd-A.csv	Add files via upload	Oct 28, 2020
Troj-DocDL-AEOL.csv	Troj-DocDL-AEOL.csv	Update Troj-DocDL-AEOL.csv	Dec 23, 2021
Troj-DropperAsAService.csv	Troj-DropperAsAService.csv	Add files via upload	Sep 1, 2021
Troj-Emotet-Ukraine_maldocs.csv	Troj-Emotet-Ukraine_maldocs.csv	Update Troj-Emotet-Ukraine_maldocs.csv	May 20, 2022
Troj-KilllSomeOne.csv	Troj-KilllSomeOne.csv	Add files via upload	Nov 5, 2020
Troj-Kingmine	Troj-Kingmine	Update Troj-Kingmine	Jun 10, 2020
Troj-Miner-AED.csv	Troj-Miner-AED.csv	Add files via upload	Jun 15, 2022
Troj-PS-FX.csv	Troj-PS-FX.csv	Add files via upload	May 5, 2021
Troj-Polazert_IOCs.csv	Troj-Polazert_IOCs.csv	Add files via upload	Feb 1, 2022
Troj-Qakbot.csv	Troj-Qakbot.csv	Add files via upload	Mar 10, 2022
Troj-Ransom-GXS.csv	Troj-Ransom-GXS.csv	Update Troj-Ransom-GXS.csv	Jul 18, 2023
Troj-gootloader.csv	Troj-gootloader.csv	Update Troj-gootloader.csv	Aug 12, 2021
Troj-gootloader.yara	Troj-gootloader.yara	Add files via upload	Mar 1, 2021
Troj_Agent-BJJB.csv	Troj_Agent-BJJB.csv	Add files via upload	Dec 13, 2022
Troj_GuLoader.csv	Troj_GuLoader.csv	Add files via upload	Apr 13, 2023
Trojan-Glupteba	Trojan-Glupteba	Update Trojan-Glupteba	Jun 25, 2020
Trojan-LDMiner.csv	Trojan-LDMiner.csv	Add files via upload	May 7, 2021
Worm-Raspberry-Robin.csv	Worm-Raspberry-Robin.csv	Add files via upload	Nov 21, 2022
Worm-WannaCry	Worm-WannaCry	Create Worm-WannaCry	Sep 18, 2019
Zemana-driver-IoCs.csv	Zemana-driver-IoCs.csv	Add files via upload	Mar 4, 2024
atk-backstab-d.csv	atk-backstab-d.csv	Add files via upload	Apr 18, 2023
bitcoin-addys	bitcoin-addys	Update bitcoin-addys	Aug 10, 2022
crimson_palace_2.csv	crimson_palace_2.csv	Add files via upload	Sep 10, 2024
crimson_palace_post-08-2023.csv	crimson_palace_post-08-2023.csv	Add files via upload	Jun 5, 2024
crimson_palace_prior_intrusions.csv	crimson_palace_prior_intrusions.csv	Add files via upload	Jun 5, 2024
crimson_palace_stac1248-alpha.csv	crimson_palace_stac1248-alpha.csv	Update crimson_palace_stac1248-alpha.csv	Jun 5, 2024
crimson_palace_stac1305_charlie.csv	crimson_palace_stac1305_charlie.csv	Update crimson_palace_stac1305_charlie.csv	Jun 5, 2024
crimson_palace_stac1870_bravo.csv	crimson_palace_stac1870_bravo.csv	Add files via upload	Jun 5, 2024
defi-mining-scams-iocs.csv	defi-mining-scams-iocs.csv	Add files via upload	Dec 16, 2023
double-dragon-breath-iocs.csv	double-dragon-breath-iocs.csv	Update double-dragon-breath-iocs.csv	May 3, 2023
email account compromise 365 2023-06.csv	email account compromise 365 2023-06.csv	Add files via upload	Jul 2, 2023
files_hosted_on_discord.csv	files_hosted_on_discord.csv	Add files via upload	Jul 22, 2021
fleeceware-chatbot-apps.csv	fleeceware-chatbot-apps.csv	Add files via upload	May 17, 2023
gootloader_cats_iocs.csv	gootloader_cats_iocs.csv	Add files via upload	Nov 5, 2024
mal-fakealert.csv	mal-fakealert.csv	Rename mal-fakealert to mal-fakealert.csv	Sep 9, 2020
maldrivers_release_2.csv	maldrivers_release_2.csv	Add files via upload	Jul 11, 2023
malware-MyKings	malware-MyKings	Create malware-MyKings	Dec 18, 2019
malware-MyKings-domains	malware-MyKings-domains	Create malware-MyKings-domains	Jul 2, 2020
malware-MyKings-v2.csv	malware-MyKings-v2.csv	Rename malware-MyKings-v2 to malware-MyKings-v2.csv	Jul 15, 2020
malware-Raticate	malware-Raticate	Update malware-Raticate	May 14, 2020
malware-raticate-cloudeye.csv	malware-raticate-cloudeye.csv	Update malware-raticate-cloudeye.csv	Jul 15, 2020
ms-msdt restore registry key.reg	ms-msdt restore registry key.reg	Add files via upload	May 30, 2022
papercut-nday-indicators-of-compromise.csv	papercut-nday-indicators-of-compromise.csv	Add files via upload	Apr 27, 2023
raccoonstealer.csv	raccoonstealer.csv	Add files via upload	Aug 5, 2021
ransomware_atomsilo.csv	ransomware_atomsilo.csv	Add files via upload	Oct 4, 2021
ransomware_memento.csv	ransomware_memento.csv	Strip 16381 empty columns from ransomware_memento.csv,	Nov 19, 2021
smishing campaign targeting Indian customers 2023-04.csv	smishing campaign targeting Indian customers 2023-04.csv	Update smishing campaign targeting Indian customers 2023-04.csv	Apr 12, 2023
usb worm with global reach.csv	usb worm with global reach.csv	Add files via upload	Apr 7, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Repository files navigation

IoCs

About

Releases

Packages

Contributors 9

Languages

sophoslabs/IoCs

Folders and files

Latest commit

History

Repository files navigation

IoCs

About

Resources

Stars

Watchers

Forks

Releases

Packages 0

Contributors 9

Languages

Packages