ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://217.60.36.94/william/wi.txt.

Database Entry


IOC ID:1873888
IOC: http://217.60.36.94/william/wi.txt
IOC Type :url
Threat Type :payload_delivery
Malware: MoonPeak
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS56971 AS56971
Country:- HK
First seen:2026-08-14 06:20:14 UTC
Last seen:never
UUID:e068bb27-9765-11f1-8a3d-42010aa4000a
Reporter josephgerald
Reward 5 credits from ThreatFox
Tags:DPRK kimsuky MoonPeak Stella

Avatar
josephgerald
MoonPeak/Stella payload (gzip masked with {\rtf1} header, PE sha256 877fb2b2d8800e7831f1912b37550627d97cd704a1592e16260a889473e90658) and PowerShell stage-3 loaders.