ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://shkpiva.shop:5627/sessions.

Database Entry


IOC ID:1873781
IOC: http://shkpiva.shop:5627/sessions
IOC Type :url
Threat Type :botnet_cc
Malware: Remus
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS47583 AS-HOSTINGER
Country:- LT
First seen:2026-08-13 16:15:58 UTC
Last seen:2026-08-13 17:34:23 UTC
UUID:44d8ceeb-9732-11f1-8a3d-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Remus
Reference: https://bazaar.abuse.ch/sample/fbe1e5b3775966705c0f376fcf0b39c0ffa456971d99675f78a0cd6dfd2794bc/

Avatar
abuse_ch
remus botnet C2