🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://192.162.199.249/hbspbloprxh3iu2h.

Database Entry


IOC ID:1970386
IOC: http://192.162.199.249/hbspbloprxh3iu2h
IOC Type :url
Threat Type :payload_delivery
Malware: AMOS
Malware alias:Atomic macOS Stealer
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS214351 FEMOIT
Country:- GB
First seen:2026-10-17 05:33:13 UTC
Last seen:never
UUID:96e47a25-c99f-11f1-bd13-42010aa4000a
Reporter c4ffeine
Reward 5 credits from ThreatFox
Tags:Amos ClickFix macOS
Reference: https://hybrid-analysis.com/sample/104a6e4b1da8f7b42bdaf887b82f2c12348c6b1ffe52d1de2d964b6329492ad7

Avatar
c4ffeine
ClickFix delivery URL on bare IP 192.162.199.249: /hbspbloprxh3iu2h serves the 723072 B AMOS Mach-O 104a6e4b. Body-confirmed via Tor 2026-10-16 20:22 UTC. AS214351 FEMO IT Solutions. Not executed.