ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://wp-filemanager.com/mshell_cred.json.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1741344
IOC: http://wp-filemanager.com/mshell_cred.json
IOC Type :url
Threat Type :botnet_cc
Malware: Unknown malware
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS216071 VDSINA
Country:- AE
First seen:2026-02-05 06:34:27 UTC
Last seen:never
UUID:ded23085-022c-11f1-ac94-42010aa4000a
Reporter Anonymous
Reward 5 credits from ThreatFox
Tags:c2 mshell PHP webshell WordPress

Avatar
Anonymous
C&C infrastructure for mshell web shell framework. Provides centralized authentication (JSON credential file) for PHP web shells deployed on compromised WordPress/PHP servers. Enables code execution, file management, and WordPress admin injection across multiple victim sites.