ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain appistartes.com.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1776774
IOC: appistartes.com
IOC Type :domain
Threat Type :botnet_cc
Malware: NodeRAT
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS209207 DHOST-AS
Country:- RU
First seen:2026-03-26 14:58:57 UTC
Last seen:never
UUID:f5b029f4-2920-11f1-9af6-42010aa4000a
Reporter Lenny_3BO
Reward 5 credits from ThreatFox
Reference: https://www.virustotal.com/gui/file/84802194859b530dcb8e374b7970912f6a27ff5e97f2bec509e59b2dffcc6146

Avatar
Lenny_3BO
Primary C2 for Node.js polling implant. nginx+Express backend. CORS allows X-Bot-Server header. Serves 18KB sysinfo collection task to any bot with valid build ID. Build 0422d2e2.