ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://a1141936.xsph.ru/fa3c5f87.php.

Database Entry


IOC ID:1551688
IOC: http://a1141936.xsph.ru/fa3c5f87.php
IOC Type :url
Threat Type :botnet_cc
Malware: DCRat
Malware alias:DarkCrystal RAT
Confidence Level : Confidence level is high (100%)
ASN:AS35278 SPRINTHOST
Country:- RU
First seen:2025-06-30 18:45:09 UTC
Last seen:never
UUID:590080da-55e2-11f0-a7f6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:dcrat RAT

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-06-30 18:55:08 3b70a6bfb2982c55bc61cc9bd84bbc25fbf36361267c61b35a09bed33e9f0640
2025-06-30 18:50:07 8f007c143c969158f00b6d71d656abaf7843ca93a99b97b8728677d92e3b3d5d