🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://178.16.53.91:8443/?h=178.16.53.91&p=8443&t=tcp&a=l32&stage=true.

Database Entry


IOC ID:1942784
IOC: http://178.16.53.91:8443/?h=178.16.53.91&p=8443&t=tcp&a=l32&stage=true
IOC Type :url
Threat Type :payload_delivery
Malware: SNOWLIGHT
Confidence Level : Confidence level is high (95%)
Is compromised? : True
ASN:AS202412 OMEGATECH-AS
Country:- GB
First seen:2026-09-30 09:57:03 UTC
Last seen:never
UUID:d0c9464e-bcb2-11f1-a463-42010aa4000a
Reporter Tuxxin
Reward 5 credits from ThreatFox
Tags:elf SNOWLIGHT

Avatar
Tuxxin
Multi-vantage capture (datacenter/residential/mobile); payload SHA-256 bb683292dc1d404c7fdcbd7b4d1dafd9e7981280580f0ae374f7620114452db5; MalwareBazaar classifies this hash as Snowlight; 39 VirusTotal engines malicious; re-verified serving the same bytes at submission time