ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://542733cm.nyash.es/gameserverdefaultbaseWpPublictempCdncentralUploads.php.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1570049
IOC: http://542733cm.nyash.es/gameserverdefaultbaseWpPublictempCdncentralUploads.php
IOC Type :url
Threat Type :botnet_cc
Malware: DCRat
Malware alias:DarkCrystal RAT
Confidence Level : Confidence level is high (100%)
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2025-08-16 17:15:11 UTC
Last seen:never
UUID:90d24aa8-7ac4-11f0-b2c6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:dcrat RAT

Malware Samples

The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-08-16 17:35:12 21c2931a57611bb4c8633ec1f75424c271a98629703eee05dfa8f46ef4715536
2025-08-16 17:15:13 cf3490aa43bed478680fcaf4cb718d98929b4c6c1f1f235d7187179094eeab7d