ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://512920cm.nyash.es/externalTogeoUpdateDefaultSqlwindowstestTrackUploads.php.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1588068
IOC: http://512920cm.nyash.es/externalTogeoUpdateDefaultSqlwindowstestTrackUploads.php
IOC Type :url
Threat Type :botnet_cc
Malware: DCRat
Malware alias:DarkCrystal RAT
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2025-09-11 14:35:08 UTC
Last seen:never
UUID:83d350c2-8f1c-11f0-bfa6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:dcrat RAT

Malware Samples

The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-09-11 14:40:10 eab87dd44560f33c6754aa5265f8d958cd900e06b9ab1dc7a221d0202ffc2e8a
2025-09-11 14:35:11 5ca0a3b3c82ae44d4f9dd1a9b7246bc03bb9a299372f142244a63f11496669a3