ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://162838cm.nyashvibe.ru/imagelowUpdateprocessprocessorLongpollProtecttestCdn.php.

Database Entry


IOC ID:1545206
IOC: http://162838cm.nyashvibe.ru/imagelowUpdateprocessprocessorLongpollProtecttestCdn.php
IOC Type :url
Threat Type :botnet_cc
Malware: DCRat
Malware alias:DarkCrystal RAT
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2025-06-16 04:35:15 UTC
Last seen:never
UUID:4c65105d-4a6b-11f0-a7f6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:dcrat RAT

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-06-16 15:00:34 0e7be060b48c46a232abec0c775d9c20014d8730f384ad29cda3e681ad4904d5
2025-06-16 10:26:02 48fd8de89a448daae1400c85468eb7c38e120c5653eae4aa3636cb39a02600bd
2025-06-16 10:25:42 572be7f011d07402c0eebdd149f8c9c0a1bf93fd49012f9ccf137a6def786172
2025-06-16 08:05:22 ada0470513a38188a3f94dd8d9e0a39b11f57df514ac8ae73d30162b1ea6d77c
2025-06-16 04:35:19 b6924ff00cf3f2a128723ee06f162ea9142e1afd6a417e6a531198ae34c15e4a