ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://118.31.168.221:80/IQQr.

Database Entry


IOC ID:1735047
IOC: http://118.31.168.221:80/IQQr
IOC Type :url
Threat Type :botnet_cc
Malware: Cobalt Strike
Malware alias:Agentemis, BEACON, CobaltStrike, cobeacon
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS37963 ALIBABA-CN-NET
Country:- CN
First seen:2026-01-21 07:50:24 UTC
Last seen:never
UUID:d84a0792-f69d-11f0-9957-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:CobaltStrike
Reference: https://bazaar.abuse.ch/sample/380bf83a03a091014a386b48f80e4fd1ee6a5c5c481dd640b47018afe910a3a1/

Avatar
abuse_ch
cobaltstrike (aka Agentemis,BEACON,CobaltStrike,cobeacon) botnet C2