🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain rockytomholland.casacam.net.

Database Entry


IOC ID:1976947
IOC: rockytomholland.casacam.net
IOC Type :domain
Threat Type :botnet_cc
Malware: Unknown RAT
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS56322 ServerAstra-AS
Country:- HU
First seen:2026-10-21 05:31:19 UTC
Last seen:never
UUID:c9f3b36e-cd07-11f1-8fc0-42010aa4000a
Reporter wristhulk
Reward 5 credits from ThreatFox
Tags:dynamic-DNS phishing rmm

Avatar
wristhulk
WebSocket C2 ws://rockytomholland.casacam.net:5222/ws/client in a signed ClientSetup_en_x64.exe remote-access agent distributed as a fake Webex installer on GitHub (gees11111/v1). Static lab extraction, not contacted.