ThreatFox IOC Database
You are viewing the ThreatFox database entry for url http://516063cm.nyash.es/ImageGeobaselinuxGeneratortestuniversalWp.php.
Database Entry
| IOC ID: | 1564591 |
|---|---|
| IOC: | http://516063cm.nyash.es/ImageGeobaselinuxGeneratortestuniversalWp.php |
| IOC Type : | url |
| Threat Type : | botnet_cc |
| Malware: | DCRat |
| Malware alias: | DarkCrystal RAT |
| Confidence Level : | Confidence level is elevated (75%) |
| ASN: | AS13335 CLOUDFLARENET |
| Country: |  US |
| First seen: | 2025-08-06 07:32:06 UTC |
| Last seen: | never |
| UUID: | 4fd62081-7228-11f0-851c-42010aa4000a |
| Reporter |  burger |
| Reward | 5 credits from ThreatFox |
| Reference: | https://www.virustotal.com/gui/file/57d93f95402fb0d260fa528e198efc5a964c3373bfc29107e63febb702392e3d/relations |
Malware Samples
The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).
| Time stamp (UTC) | SHA256 hash | Bazaar |
|---|---|---|
| 2025-08-05 19:50:16 | a24669b3718039277024a4ec115f4039a7ecf4469485b169dd35f288c232ef24 |