ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://4jtsmu3u4yrbehjf4rzfwsswhpc7ohs4nrfnlfu3xebteeaf4uv3okyd.onion:37151/.

Database Entry


IOC ID:1346068
IOC: https://4jtsmu3u4yrbehjf4rzfwsswhpc7ohs4nrfnlfu3xebteeaf4uv3okyd.onion:37151/
IOC Type :url
Threat Type :botnet_cc
Malware: SmokeLoader
Malware alias:Dofoil, Sharik, Smoke, Smoke Loader
Confidence Level : Confidence level is moderate (49%)
Is compromised? : False
First seen:2024-11-20 05:50:59 UTC
Last seen:2024-11-29 15:54:43 UTC
UUID:90324798-a6b6-11ef-91ae-42010aa4000a
Reporter johannes
Reward 5 credits from ThreatFox
Reference: https://www.zscaler.com/blogs/security-research/unraveling-raspberry-robin-s-layers-analyzing-obfuscation-techniques-and

Avatar
johannes
C2 server domain, from the ZScaler report "Unraveling Raspberry Robin's Layers: Analyzing Obfuscation Techniques and Core Mechanisms". See all IOC from that report at https://rosti.bin.re/reports/H05mRfyR