ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://cw212153.tw1.ru/L1nc0In.php.

Database Entry


IOC ID:1848213
IOC: http://cw212153.tw1.ru/L1nc0In.php
IOC Type :url
Threat Type :botnet_cc
Malware: DCRat
Malware alias:DarkCrystal RAT
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS9123 TimeWeb-AS
Country:- RU
First seen:2026-07-10 16:20:07 UTC
Last seen:never
UUID:37344b41-7c7b-11f1-97fa-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:dcrat RAT

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2026-07-10 21:00:10 dc2a074cd511f6a130c72a365c0139399610eee9e50368b9f3be20016ede4a4e
2026-07-10 16:20:10 76d09603b6280d22dcd73e00a87210a9b24273f93074031fd6a7134559544eae