ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://cl309350.tw1.ru/L1nc0In.php.

Database Entry


IOC ID:1887634
IOC: http://cl309350.tw1.ru/L1nc0In.php
IOC Type :url
Threat Type :botnet_cc
Malware: DCRat
Malware alias:DarkCrystal RAT
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS9123 TimeWeb-AS
Country:- RU
First seen:2026-08-25 20:15:11 UTC
Last seen:never
UUID:ace57a3a-a0c1-11f1-a7c1-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:dcrat RAT

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2026-08-26 02:50:10 a70a66a4530d9913f65f5d40945e03a2441ac077c62edc1b4e3f4343555c6943
2026-08-25 20:20:13 fd669e1388907d25b8039b5ae22804a6b77a96d139c8f8bbff50c15c9968bfa2