ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://yvzgz.cyou/index.php.

Database Entry


IOC ID:1192015
IOC: http://yvzgz.cyou/index.php
IOC Type :url
Threat Type :botnet_cc
Malware: SmokeLoader
Malware alias:Dofoil, Sharik, Smoke, Smoke Loader
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
First seen:2023-10-23 16:25:26 UTC
Last seen:never
UUID:c5ed27e4-71c0-11ee-8063-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:smokeloader
Reference: https://bazaar.abuse.ch/sample/3dddb80ed9de80b4d7c31ecd952500294af3f235a6a0c52a5adfcb35a07a8a7a/

Avatar
abuse_ch
smokeloader (aka Dofoil,Sharik,Smoke,Smoke Loader) botnet C2