🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://widexenmexico.com.mx/plugins/Cloudflare/challenge/IsHuman/ID53728/.

Database Entry


IOC ID:1935613
IOC: https://widexenmexico.com.mx/plugins/Cloudflare/challenge/IsHuman/ID53728/
IOC Type :url
Threat Type :payload_delivery
Malware: HijackLoader
Malware alias:DOILoader, GHOSTPULSE, IDAT Loader, SHADOWLADDER
Confidence Level : Confidence level is high (90%)
Is compromised? : True
ASN:AS29802 HVC-AS
Country:- US
First seen:2026-09-27 06:39:03 UTC
Last seen:never
UUID:5405dd66-ba03-11f1-97fb-42010aa4000a
Reporter whack_sh
Reward 5 credits from ThreatFox
Tags:HijackLoader Loader msi

Avatar
whack_sh
Multi-vantage capture (datacenter/residential/mobile); payload SHA-256 fcc68fa324c98554b43c87798b630a81ed2a6df24387a9a0ab3b798f4ac9b66c; MalwareBazaar classifies this hash as HijackLoader; re-verified serving the same bytes at submission time