🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain hitsfolder.click.

Database Entry


IOC ID:1971718
IOC: hitsfolder.click
IOC Type :domain
Threat Type :botnet_cc
Malware: Unknown RAT
Confidence Level : Confidence level is high (100%)
Is compromised? : False
First seen:2026-10-18 06:10:54 UTC
Last seen:never
UUID:1dfa0db1-ca4a-11f1-bd13-42010aa4000a
Reporter Daydream
Reward 5 credits from ThreatFox
Tags:etherhiding funrat MaksRAT minecraft PussyRAT TON
Reference: https://bazaar.abuse.ch/sample/5d123596bdc088235282a1eea5431bac06440d7dded87a8ea6e8af2ac4707144/

Avatar
Daydream
Historical FunRAT (MaksRAT / PussyRAT) C2 domains extracted from the on-chain transaction history of TON smart contract EQCsNH1LY2PQeqG2HKSk2myObNTgCuREdq1IVvZFL4k_5iia (hardcoded in 5d123596bdc088235282a1eea5431bac06440d7dded87a8ea6e8af2ac4707144, d8c72771d069a35841e5b8a1eb3b1f34faef03bda187b8b97200735e73d3f409, be28f507fbaa4ae0b17b55d9ee9d9df63862a8530bf4cf49802d6bda53d35e40, and 7c997959c5f233b07bed777d6477ad2cee3c316447dd4bff3ed77f952211d70d). Pushed by operator wallet EQBBL4mLkytKdInyqg-cb4unkC1fUeIV4vr3LFmjfqtDG1tX alongside rat.best and funrat.co.