ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://92.63.99.102/supportlocal/prod/generatorprogramlimit/limitPythonlocal/bin/externalLineprotectdefaulttest.php.

Database Entry


IOC ID:157322
IOC: http://92.63.99.102/supportlocal/prod/generatorprogramlimit/limitPythonlocal/bin/externalLineprotectdefaulttest.php
IOC Type :url
Threat Type :botnet_cc
Malware: DCRat
Malware alias:DarkCrystal RAT
Confidence Level : Confidence level is high (100%)
ASN:AS29182 RU-JSCIOT
Country:- RU
First seen:2021-07-02 21:05:58 UTC
Last seen:never
UUID:4cb7c8a9-db79-11eb-b17b-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:dcrat

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-07-02 23:25:37 ff8bcaa8c3a792db0f191e003d3c72a3dc532f849e2f495254c6252e5b61382c
2021-07-02 21:06:02 88771c803925c9b53a6eeedbf38e34bbb20cc6ab5861ca8789b1efbdda0cbbb2