IoCs
Dominios, URLs, servidores de comando y control y hashes de malware vistos en las últimas horas, con foco en lo que toca a Chile. Listos para cargar en tu firewall, proxy o SIEM. Actualizado: 2026-11-15 13:46 (hora de Chile).
12Indicadores con dominio .cl (30 días)
4648Indicadores recientes de alta confianza
3098Dominios y URLs maliciosas
271Servidores C2 (IP:puerto)
Chile: sitios .cl involucrados
En la mayoría de los casos son sitios legítimos comprometidos para alojar o distribuir malware, no organizaciones maliciosas. Si el tuyo aparece, revisa el servidor y cambia credenciales.
| Indicador | Tipo | Amenaza | Visto | Fuente |
|---|---|---|---|---|
| fumivet[.]cl | domain | Unknown Loader | 2026-11-15 10:38 | ThreatFox |
| cafedelmuseo[.]cl | domain | Unknown Loader | 2026-11-15 08:29 | ThreatFox |
| dux[.]aprendizajeeslibertad[.]cl | domain | Vidar | 2026-11-15 05:05 | ThreatFox |
| www[.]fumivet[.]cl | domain | ClearFake | 2026-11-15 04:30 | ThreatFox |
| fot[.]aprendizajeeslibertad[.]cl | domain | Vidar | 2026-11-15 04:05 | ThreatFox |
| nv[.]aprendizajeeslibertad[.]cl | domain | Vidar | 2026-11-15 03:05 | ThreatFox |
| inn[.]aprendizajeeslibertad[.]cl | domain | Vidar | 2026-11-15 02:05 | ThreatFox |
| xp[.]aprendizajeeslibertad[.]cl | domain | Vidar | 2026-11-15 01:05 | ThreatFox |
| aprendizajeeslibertad[.]cl | domain | Vidar | 2026-11-15 00:05 | ThreatFox |
| k0f[.]aprendizajeeslibertad[.]cl | domain | Vidar | 2026-11-15 00:05 | ThreatFox |
| apegotienda[.]cl | domain | Unknown Loader | 2026-11-14 22:18 | ThreatFox |
| xsurf[.]cl | domain | Unknown Loader | 2026-11-13 11:03 | ThreatFox |
Familias más activas (7 días)
- Mirai397
- IClickFix306
- ClearFake300
- Vidar166
- NjRAT110
- WARDENStealer87
- Raven Stealer87
- php.shin_webshell73
- Cobalt Strike64
- RN Stealer61
- Unknown Stealer60
- KAgent57
Últimos indicadores
Muestra de los más recientes. La lista completa está en el CSV y el JSON.
| Indicador | Tipo | Amenaza | Visto | Fuente |
|---|---|---|---|---|
| telun[.]store | domain | ClearFake | 2026-11-15 12:05 | ThreatFox |
| bj[.]apibet99[.]net | domain | Vidar | 2026-11-15 12:05 | ThreatFox |
| 154[.]94[.]232[.]212:21128 | ip:port | VShell | 2026-11-15 12:05 | ThreatFox |
| 209[.]42[.]27[.]55:443 | ip:port | NjRAT | 2026-11-15 12:05 | ThreatFox |
| hxxp://wienu[.]com/swat/gate[.]php | url | Pony | 2026-11-15 12:05 | ThreatFox |
| hxxp://113[.]53[.]69[.]133:42068/bin[.]sh | url | elf | 2026-11-15 12:04 | URLhaus |
| hxxp://175[.]43[.]40[.]83:51473/i | url | malware_download | 2026-11-15 12:02 | URLhaus |
| hxxp://5[.]26[.]99[.]14:42030/bin[.]sh | url | malware_download | 2026-11-15 12:02 | URLhaus |
| hxxp://61[.]54[.]40[.]75:57440/bin[.]sh | url | malware_download | 2026-11-15 12:02 | URLhaus |
| hxxp://113[.]53[.]69[.]164:51286/i | url | malware_download | 2026-11-15 12:02 | URLhaus |
| hxxp://77[.]53[.]231[.]107:56450/bin[.]sh | url | malware_download | 2026-11-15 12:02 | URLhaus |
| hxxps://raw[.]githubusercontent[.]com/mpathroliya/College-Management-System/refs/heads/master/database/Management-College-System-1[.]1[.]zip | url | github, SmartLoader, zip | 2026-11-15 12:01 | URLhaus |
| hxxps://fastsetup[.]lol/7qabzvva[.]rar | url | fastsetup-lol, ua-wget | 2026-11-15 12:01 | URLhaus |
| hxxp://192[.]162[.]199[.]249/9yrba1w | url | 192-162-199-249, ua-wget | 2026-11-15 12:01 | URLhaus |
| 446bb0d1935fe3ca3e83d7af92f272074c90df0f21929094fadca1fc88d9637b | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| ccc6103d6ac8a4cc668896e5cbfd896f398129d2637d73366ae8861c7274c6bf | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 898fa40b94235f7ba52989ecd80a26ec138da432064861aff53c2847780677f6 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 0fcd43599591000c1dddeab67cf80ad8000fa00330dc6886c842a17a431fc48e | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| a58d73918bfa791f170574476d404933a95b1fd571d36998fc9d247e3d321c8a | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 06846d3cf8f2adca94f5fff8d54679b3fe6c6c7f422c12f3833b9ef89db4c933 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 3253c2a0ded7fa349166fd8cebf51635449dc365e9ff23d90064c5629af8be20 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 399474159cc7388118076ec5b41cbcbf3700fe6f2a208a0ffc90e139237ec1a5 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 7a6369ff5105c609808fcd357d5b133ea6628b8cc0c047b4cd45091d2f60fb2c | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 5fadf2f38d7a8ecf55eedeb0b780f90ec8b311e9e7b994fa62994f03445a9c27 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 1afc22181879c503b24cecbf14bca3262428816ec4dd2ab56858cd84bcb51985 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| f65e2c7f80b8b3d6a23f0a0fed5cac2cd3a07d5edc7a4bdb7141d335f44ac18a | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 27fd2c873a20fc479f406df1e0b92637c8c5f7879a44a9802abadef050bc2c2e | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 7341f8a6dddda450894f6cfd5d27ef5b566ed0dd561dc3078f83587684849d92 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 61e970e007f4287a61a90279a3d5b389b52b8399dbc4fe989101939941591c2e | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 40c28d537cc00dc219affafd2c6ffec2431d8031f90e88504726752845a10de6 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 6529d2bb75e932a440f40317847571e2a2b3d96c07d6613b588d43224159188a | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| b23dbaa123787c0c014f605e9bc2820bf4700aa30461891450b24567966502c9 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| d8c39d59b3669a9231c170b2fb38858b996b29f97d7a70cf968f3e5665b759b8 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 10bb2df862c55d400453bd615fe679876e6971ee32c4f6b38dd72715d7adc1d8 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| a821c692fb49fb5dc1764b695fd075766866faa36c5c7f772ec9e89072c6d220 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| f2ae068a14935ac7d9b12f2f885033f14a2b98f25b228790ed5c2addc1005663 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| cb414685f6067f645788c5055ab5c9a3c1ae3f4689d6361a3e8fb6cf57a1d497 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| a8a6b532d74ef30bc28538a5786bb7f98be34d9051c1a81a2a5ea210ebd91b76 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| bd78d2adbe445bd202f27b07058e72c1793f23e216e1f293e0e786766ea25648 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 2bda9adfff9a4b6819788075a49a735e58d620b846c7a692a8b46f0e6fa60c05 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 5e9d63371293173bf1645daed0efa54034bf3708c29e0ba135a4f53dd10680d3 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 980761c0fec6cb3427a9d70e21eb71b6aa864693dda011ddd124355d0fd8a278 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 85871c2b173450401d47c33def4f37d142a458e86be0f9b74c3c0ec3462efeb9 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 4acd6d67cb5ad121f7efe05d378a882119aabf0bd8c01561f0f8aeecc7f8fcc6 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| b1063de91ae2d3128d63387e461a114ff71c5678a6cb6ff5cd19f1d349c57b3f | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 10b691863ca9d7afe108ed871eea6559ba34c77e691461855a7c3671158a4b89 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| 405ea2b20c5a140cc4e87c8801e61738c6df4486a9bc4fdab327cffae7e3df81 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| eb97a5c156b8ff1e915732375c735e990ef10e2038d6928eafe6ec97e766e5b9 | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| e67a35a0e25ff9d4212f866cf95aa031e80e1c60d7137a5f1ce5a7cdef572fcf | sha256_hash | Mirai | 2026-11-15 11:59 | ThreatFox |
| c2336a7bbe78bd081a9b1cfb204aae332a9e67506b7a147f7ec181d5751bb7d1 | sha256_hash | Mirai | 2026-11-15 11:58 | ThreatFox |
| 68e518bb24a1dbf4271b3aac54526116929aecd5562b3d2c2c058a23d4375ddf | sha256_hash | Mirai | 2026-11-15 11:58 | ThreatFox |
| 29cc2133a9fafd64d9eaa94d5f281a7da6621f7f55630fd3de33baa7d72a5070 | sha256_hash | Mirai | 2026-11-15 11:58 | ThreatFox |
| eb00fac5157b1919e0daec3c0091faba3046a2e8d23dcf532db98828232a4d97 | sha256_hash | Mirai | 2026-11-15 11:58 | ThreatFox |
| c82ef18e7bac79d3d340071afdbd43564100ec8777d7bd1c3f0d0dc3cf16d6ca | sha256_hash | Mirai | 2026-11-15 11:58 | ThreatFox |
| ede5d5f6eb0710ef46b86774ff1ff74a486ad9b92a04143e92af78fed09b8197 | sha256_hash | Mirai | 2026-11-15 11:58 | ThreatFox |
| 345d0cf00f7db7a328da1e184e5a1284e2dc7db74fc93e1781f7c726738955a4 | sha256_hash | Mirai | 2026-11-15 11:58 | ThreatFox |
| www[.]survane[.]com | domain | ClearFake | 2026-11-15 11:56 | ThreatFox |
| hxxp://175[.]153[.]129[.]217:49961/i | url | malware_download | 2026-11-15 11:47 | URLhaus |
| hxxp://182[.]127[.]176[.]6:41758/i | url | malware_download | 2026-11-15 11:47 | URLhaus |
| hxxp://45[.]204[.]146[.]120/iran[.]m68k | url | 45-204-146-120, elf, ua-wget | 2026-11-15 11:43 | URLhaus |
Fuentes: ThreatFox y URLhaus de abuse.ch. Los indicadores se muestran desactivados (hxxp, [.]) para evitar clics accidentales. Úsalos para detección y bloqueo, nunca para atacar.