🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain ewgahskoot.com.

Database Entry


IOC ID:1033906
IOC: ewgahskoot.com
IOC Type :domain
Threat Type :botnet_cc
Malware: IcedID
Malware alias:BokBot, IceID
Confidence Level : Confidence level is moderate (50%)
Is compromised? : False
First seen:2022-12-07 15:55:36 UTC
Last seen:2023-09-29 09:39:04 UTC
UUID:9733e6fb-7647-11ed-8c16-42010aa4000a
Reporter Anonymous
Reward 5 credits from ThreatFox

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-12-08 07:40:22 99dfb7baafec050861e152a036af86fc0c7663f3c719d58a56dfd9f06f4b8cef
2022-12-08 07:25:18 f4daa4b7976108d0eeae9cfd086b9410322ca3ef24acda9251272c3188abb627