ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain touchkasablanka.com.

Database Entry


IOC ID:1734440
IOC: touchkasablanka.com
IOC Type :domain
Threat Type :payload_delivery
Malware: NetSupportManager RAT
Malware alias:NetSupport
Confidence Level : Confidence level is high (100%)
Is compromised? : True
ASN:AS202015 HZ-US-AS
Country:- BG
First seen:2026-01-19 22:29:50 UTC
Last seen:2026-01-19 21:07:05 UTC
UUID:ccbbd97b-f57a-11f0-9957-42010aa4000a
Reporter monitorsg
Reward 5 credits from ThreatFox
Tags:SmartApeSG
Reference: https://infosec.exchange/@monitorsg/115923800073333437

Avatar
monitorsg
hXXps://touchkasablanka[.]com/logout/profile-core.php --> hXXps://touchkasablanka[.]com/logout/user-effect.js (clickfix) --> hXXp://79[.]141.163.155/summit (HTA) --> hXXps://sammremix[.]com/summit (HTA) --> hXXps://79[.]141.163.155/tech (ZIP)