🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain ultrasshell1.ddns.net.

Database Entry


IOC ID:1860648
IOC: ultrasshell1.ddns.net
IOC Type :domain
Threat Type :botnet_cc
Malware: AsyncRAT
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS40861 PARAD-40-ASN
Country:- US
First seen:2026-07-27 15:40:43 UTC
Last seen:never
UUID:87498b54-89d1-11f1-8973-42010aa4000a
Reporter abuse_ch
Reward 10 credits from Atake
Tags:asyncrat
Reference: https://bazaar.abuse.ch/sample/ede9c431d764668322e68d0ed9277e3d2aacc4904fca4f3a09f11d8662d3365a/

Avatar
abuse_ch
asyncrat botnet C2 on port 11005 TCP