ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://cx12805.tw1.ru/5c1e03c3.php.

Database Entry


IOC ID:1571907
IOC: http://cx12805.tw1.ru/5c1e03c3.php
IOC Type :url
Threat Type :botnet_cc
Malware: DCRat
Malware alias:DarkCrystal RAT
Confidence Level : Confidence level is high (100%)
ASN:AS9123 TimeWeb-AS
Country:- RU
First seen:2025-08-20 22:15:22 UTC
Last seen:never
UUID:2a59ca39-7e13-11f0-bfa6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:dcrat RAT

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-08-21 04:30:17 a1f1d8797ffd930f0a16f3a1bd96b58419bb05bcd304a6e4ec2ddc14c664c83c
2025-08-20 22:15:25 d607bfcbe22d2dd7d7a40172c2c5e1680d5d1132c8cab4b2ce51b57ca84fe997