🀲🏼 NEW | abuse.ch Community Hub! Earn recognition πŸ… for the malware intelligence you share, climb the leaderboards πŸ“ˆ, and connect with like-minded contributors who share your hunting focus 🀝. Ready to unlock your profile? Go to the Community Hub β†’

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://on.ktspace.p-e.kr/index.php.

Database Entry


IOC ID:1294985
IOC: http://on.ktspace.p-e.kr/index.php
IOC Type :url
Threat Type :botnet_cc
Malware: Kimsuky
Confidence Level : Confidence level is moderate (49%)
Is compromised? : False
First seen:2024-07-06 05:04:10 UTC
Last seen:2024-11-29 18:16:55 UTC
UUID:65fc11c0-3af4-11ef-8261-42010aa4000a
Reporter johannes
Reward 5 credits from ThreatFox
Reference: https://asec.ahnlab.com/en/67660/

Avatar
johannes
C&C Server Addresses, from the AhnLab Security Intelligence Center report "Kimsuky Group’s New Backdoor Appears (HappyDoor)". See all IOC from that report at https://rosti.bin.re/reports/Nrapr5VF