ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain imdeveloper.work.gd.

Database Entry


IOC ID:1686988
IOC: imdeveloper.work.gd
IOC Type :domain
Threat Type :botnet_cc
Malware: Quasar RAT
Malware alias:CinaRAT, QuasarRAT, Yggdrasil
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS16276 OVH
Country:- FR
First seen:2025-12-27 01:40:23 UTC
Last seen:2026-01-01 22:54:06 UTC
UUID:031f4529-e2c5-11f0-9957-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:quasar
Reference: https://bazaar.abuse.ch/sample/821a72cc451b8937d65c39ea4e7b04634a809e473945662f711f6870d932e84d/

Avatar
abuse_ch
quasar (aka CinaRAT,QuasarRAT,Yggdrasil) botnet C2 on port 1414 TCP