🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://oby2349.giize.com:3049/is-ready.

Database Entry


IOC ID:1563859
IOC: http://oby2349.giize.com:3049/is-ready
IOC Type :url
Threat Type :botnet_cc
Malware: Houdini
Malware alias:Hworm, Jenxcus, Kognito, Njw0rm, WSHRAT, dinihou, dunihi
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS42708 GLESYS
Country:- SE
First seen:2025-08-04 02:45:03 UTC
Last seen:never
UUID:05d3b2b1-70dd-11f0-851c-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:RAT WSHRAT

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-08-04 07:10:09 f231c44547c9c957a95dc724902c2693d76a0a07926299ba86a4e7a52a425d71
2025-08-04 02:45:06 17aa65491e4205acc9bb5ae32426a2f3d3aa985d14234b55598f2ca3004bfcea