🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://api.telegram.org/bot8744887484:AAFOoHCJQhekvoDaF1VdGBdPW5EyVjm2d_E/sendMessage?chat_id=8547707302.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1945845
IOC: https://api.telegram.org/bot8744887484:AAFOoHCJQhekvoDaF1VdGBdPW5EyVjm2d_E/sendMessage?chat_id=8547707302
IOC Type :url
Threat Type :botnet_cc
Malware: 404 Keylogger
Malware alias:404KeyLogger, Snake Keylogger
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS62041 Telegram
Country:- VG
First seen:2026-10-02 20:44:33 UTC
Last seen:never
UUID:0324886d-be9f-11f1-9be1-42010aa4000a
Reporter kanwrath
Reward 5 credits from ThreatFox
Tags:exfil SnakeKeylogger telegram
Reference: https://bazaar.abuse.ch/sample/803d6aeb379857416ead51f62c9d5484809d36becdcc1d6d591870049fae9b91/

Avatar
kanwrath
Telegram Bot API exfiltration channel for Snake Keylogger (404 Keylogger). Extracted by CAPEv2 from the unpacked payload (SHA256 1d0f2d9db8cc9498ffed71d038690bfe52b39b3a1771bbfae0088db2d603cca0) of sample 803d6aeb379857416ead51f62c9d5484809d36becdcc1d6d591870049fae9b91. Identical config independently extracted by Triage (report 260608-llly1acs8w). Bot ID 8744887484, chat ID 8547707302.