ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain u.idsource.su.

Database Entry


IOC ID:1848907
IOC: u.idsource.su
IOC Type :domain
Threat Type :botnet_cc
Malware: Aisuru
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS135330 ADCDATACOM-AS-AP
Country:- HK
First seen:2026-07-12 07:42:14 UTC
Last seen:never
UUID:a5b5cce4-7dc4-11f1-97fa-42010aa4000a
Reporter deepfield_ert
Reward 5 credits from ThreatFox
Tags:AISURU c2 CAFEBABE DNS-TXT

Avatar
deepfield_ert
Aisuru gen2 DNS-TXT C2 domains; TXT records are CAFEBABE-XOR encoded and decode to the C2 IP:port; confirmed via sample reverse-engineering and live probing (e.g. 5748.reformuk.st -> DigitalOcean pool on 8001/8080).