Campaigns / Malware / Family

LxBaseRAT

6New IOCs · 24h

22New IOCs · 7 days

22Indicators tracked

2Independent feeds

2026-10-11 15:18Last activity

New indicators per day

2026-09-29 to 2026-10-12, by first report.

IP2
Hash20
C22
Malware20

Where its infrastructure is hosted

🇧🇬 Bulgaria1
🇳🇱 Netherlands1

Latest indicators

Filter the live feed →

First seen	Type	Indicator	Role	Where
2026-10-11 15:18	SHA256	a4ccf299c22432a71437d67086a1ccb07842ae8150dba30ddd488a3d79583316	Malware sample	—
2026-10-11 15:17	SHA256	0caf3418e4cbea48de55c582185c92fe923b5e0d8089bf29bb7b43ed9726ba97	Malware sample	—
2026-10-11 15:17	SHA256	8fd8f83d1ced581a9412d3323591cdff9b2c7e70498719bf15da996056f704aa	Malware sample	—
2026-10-11 15:17	SHA256	a86ef7bae584abfc22910223a63831976b95340470ae72b85604488faa063530	Malware sample	—
2026-10-11 15:16	SHA256	72682922fdf8f7d050b3f02531d1c532e9b67c8a45a30c0940eb927ea2b712c4	Malware sample	—
2026-10-11 15:16	SHA256	b5c706498ca50c04068afa0288df90a33435ed5b2c22052a0ac42cb3c1c13758	Malware sample	—
2026-10-09 18:42	IP	150.40.98[.]200:4521	Botnet C2	—
2026-10-09 18:19	SHA256	47d55b8f04c66c808fdeda600a163f721a97df25011f7d4967593e8db021f06e	Malware sample	—
2026-10-09 14:58	SHA256	6333c28ad5ac6269e51a9190e680961000f9eefea795e0b4b1fe492bb5ca8e2c	Malware sample	—
2026-10-09 14:58	SHA256	ad3a6f21aec6fd53196d55ef21de2c97c65bf64ebace3f1eadbe2c86bbc4b031	Malware sample	—
2026-10-08 14:46	SHA256	1cb3cbe9a8ab6f5c56f90e7bcdcc20fc8d3ce0adbfc2ecc14690c72b960c71b1	Malware sample	—
2026-10-08 09:35	SHA256	420a182edd8c5a211492729679f9f6156bcfcabeca2d7c84d605c7ed3521400a	Malware sample	—
2026-10-08 09:35	SHA256	671ef529135681da072e1829635aff387ba29066550babe555a620bff71a266b	Malware sample	—
2026-10-07 18:04	SHA256	60cd45011ec94f6d01c21271090d85956068dd10c9d5ab427117be73bfc44216	Malware sample	—
2026-10-07 18:02	SHA256	d498dadab8e6127c89e9ef5fb9b5c4028c790504097834f66f2f37b7046970bb	Malware sample	—
2026-10-06 17:14	SHA256	d14e45479e964178f165e330954120cf0e3c26714af9a4339ccd41aa017a4c83	Malware sample	—
2026-10-06 08:10	IP	23.132.164[.]124:4521	Botnet C2	—
2026-10-06 07:57	SHA256	839a16c3221005c8749339391b83580ae447138016dd8443bf19eaa1b23e2fc0	Malware sample	—
2026-10-06 07:56	SHA256	34fa0fe3dbf98706f92ae133b37a0db4a1cbe9b91daaca07f32e5aa2fde94dc0	Malware sample	—
2026-10-06 07:56	SHA256	d6d12deeb073f8fb45305f125cccad234b21b723920b6734b717f215ea04967e	Malware sample	—
2026-10-06 07:56	SHA256	107206a7343455aab6a6f0849a9427de29e69a6b61d6b03670af08fddb2ee3e1	Malware sample	—
2026-10-06 06:47	SHA256	1d258e3a96472f5f61c417a14799d793f6c67fec04f491ca1f2c4f03376f51c1	Malware sample	—

Defanged for safety. URL query strings removed.

New indicators per day

Where its infrastructure is hosted

Latest indicators

Security check