ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://gxutc2c.com/tmp/index.php.

Database Entry


IOC ID:1227384
IOC: http://gxutc2c.com/tmp/index.php
IOC Type :url
Threat Type :botnet_cc
Malware: SmokeLoader
Malware alias:Dofoil, Sharik, Smoke, Smoke Loader
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS24940 HETZNER-AS
Country:- DE
First seen:2024-01-02 19:40:05 UTC
Last seen:never
UUID:ba70f7e9-a9a6-11ee-a7e8-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:smokeloader
Reference: https://bazaar.abuse.ch/sample/f95b01b35d47756420ec9c626d56865c687323473b11e51f141277c746db03a0/

Avatar
abuse_ch
smokeloader (aka Dofoil,Sharik,Smoke,Smoke Loader) botnet C2