ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://91.92.242.27/kaWt2QXfpPueNM/index.php.

Database Entry


IOC ID:1605342
IOC: http://91.92.242.27/kaWt2QXfpPueNM/index.php
IOC Type :url
Threat Type :botnet_cc
Malware: Amadey
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS209800 metaspinner-asn
First seen:2025-10-02 05:16:01 UTC
Last seen:2025-10-27 14:05:20 UTC
UUID:9b384829-9f09-11f0-9671-42010aa4000a
Reporter Bitsight
Reward 5 credits from ThreatFox
Tags:Amadey c2 cdc3c4

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-10-02 08:35:13 a441e76246ce6a7f26b8fef2f6a759672928d09cdfce7ba503701915fd69fb88
2025-10-02 05:20:11 26fe5d4dedc86c5c5fcd19b101b37f9960ef28d3210566a48cd63cd90e62b62e