Campaigns / Malware / Family

Ftmn

12New IOCs · 24h

34New IOCs · 7 days

34Indicators tracked

1Independent feeds

2026-10-12 03:30Last activity

New indicators per day

2026-09-29 to 2026-10-12, by first report.

Hash20
IP14
Malware34

Where its infrastructure is hosted

🇩🇪 Germany3
🇺🇦 Ukraine3
🇺🇸 United States3
🇷🇺 Russia2
🇬🇧 United Kingdom1
🇸🇨 Seychelles1
🇳🇱 Netherlands1

Latest indicators

Filter the live feed →

First seen	Type	Indicator	Role	Where
2026-10-12 03:30	IP	116.202.106[.]111	Contacted by malware	—
2026-10-12 03:15	IP	185.215.113[.]20	Contacted by malware	—
2026-10-11 16:52	SHA256	7d9829cbff75629f181f53703e2b169412c55132df142dd07ffbce1729fb93aa	Malware sample	—
2026-10-11 16:52	IP	2.57.187[.]29	Contacted by malware	—
2026-10-11 16:52	IP	212.192.246[.]217	Contacted by malware	—
2026-10-11 15:31	SHA256	47cfacf57df94f43e6bb94bf054d37881c350e206ddffd1839870b8d7712d0e1	Malware sample	—
2026-10-11 15:31	IP	146.70.87[.]230	Contacted by malware	—
2026-10-11 14:43	SHA256	d19e6fa8d9d6e280d02e0d1303129b429a311f48ff69d64f1a105c0e535a456a	Malware sample	—
2026-10-11 14:43	IP	80.71.158[.]106	Contacted by malware	—
2026-10-11 14:43	IP	208.91.199[.]233	Contacted by malware	—
2026-10-11 13:36	SHA256	856998ff88903fd997f7a77f22b67ea5a0e6fac5df621e316ead778eb3f7cf40	Malware sample	—
2026-10-11 13:02	SHA256	7a8337c3e7e1c50ebb89eaf51d4cc78a1d7b70658922a04ee833bd442b1ed5d8	Malware sample	—
2026-10-11 07:02	IP	5.183.95[.]23	Contacted by malware	—
2026-10-11 06:41	SHA256	0d789cb9d9ab59a60edde56cf10c2144ccca27f7a35f4597950240dc7d26a6cf	Malware sample	—
2026-10-11 06:41	IP	185.3.95[.]153	Contacted by malware	—
2026-10-09 12:54	SHA256	1ccd83907630c72e7b841422a4c32bf71351089167c11fd449f6a6edd8f17cac	Malware sample	—
2026-10-09 12:54	SHA256	210785708f36a883223619d55d526001fdee4c2191091062d52afe5b4b562bd5	Malware sample	—
2026-10-09 12:54	IP	194.38.20[.]14	Contacted by malware	—
2026-10-09 11:56	SHA256	19138eb3ecd236356b36679318ff3f3c5d18559e3290b6cd022e861a5d907808	Malware sample	—
2026-10-09 11:56	SHA256	1c131b8e9e8046e26805afa142ff4d86638a16f211c9057dda7ead37f58a7cf1	Malware sample	—
2026-10-09 11:56	IP	37.221.67[.]114	Contacted by malware	—
2026-10-09 11:56	IP	91.238.104[.]171	Contacted by malware	—
2026-10-09 08:34	SHA256	3219d211375ea0256de26de30ce61e2dc9de68ec75374ab1bda42d99f0032d50	Malware sample	—
2026-10-09 08:34	IP	87.251.79[.]167	Contacted by malware	—
2026-10-07 12:03	SHA256	24d8512daa1e19a6fc01e51064b595f98229903d2e4a5a1692e5e1289272ab20	Malware sample	—
2026-10-07 12:03	SHA256	481aa21b2abd3e0f904be8b6dc4fafea5b5d5beb949ae326eddc940c00a411e9	Malware sample	—
2026-10-07 11:48	SHA256	ac354255ee83deae72450d5e1e498d008ad3f3bd514c92a09ce70e87208a06bd	Malware sample	—
2026-10-07 11:30	SHA256	30300bacc41b83ae7100c37cdfd60783885a0d549ff26203f095d0e15d900d51	Malware sample	—
2026-10-07 11:09	SHA256	63caf802b1de233f2e8c90921680ff4ee9c994ffc6abe3f7229ff53ede1e835a	Malware sample	—
2026-10-06 16:38	SHA256	e522368018a27905fccc6e7d1e1e68f32ee089b305284526cf0b8c07448b24e6	Malware sample	—
2026-10-06 16:17	SHA256	08c8a15072d070d7def015c40e4a7c524b10e0dabb8d74b990cc0d011b044ce6	Malware sample	—
2026-10-06 15:57	IP	109.107.175[.]35	Contacted by malware	—
2026-10-06 15:37	SHA256	534393aa1833502749818e760bb37130b1e8f2cb107af48249d00b338a09f6b1	Malware sample	—
2026-10-06 15:37	SHA256	784c2c6e7b18b1279690eb1c7433d15eb0a9f27514f8af2412be2f11c41e1046	Malware sample	—

Defanged for safety. URL query strings removed.

New indicators per day

Where its infrastructure is hosted

Latest indicators

Security check