ThreatFox Database

Indicators of Compromise (IOCs) on ThreatFox are associated with a certain malware fas. A malware sample can be associated with only one malware family. The page below gives you an overview on indicators of compromise associated with win.nightshade_c2.

You can also get this data through the ThreatFox API.

Database Entry

Malware: NightshadeC2
Malware alias:CastleRAT
First seen:2025-11-20 17:09:12 UTC
Last seen:never
Number of IOCs:1
Malpedia: https://malpedia.caad.fkie.fraunhofer.de/details/win.nightshade_c2

Indicators Of Compromise

The table below shows all indicators of compromise (IOCs) that are associated with this particulare malware family (max 1000).

Date (UTC)IOCMalwareTagsReporter