🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain ec2-aws.ddns.net.

Database Entry


IOC ID:2004060
IOC: ec2-aws.ddns.net
IOC Type :domain
Threat Type :botnet_cc
Malware: Unknown RAT
Confidence Level : Confidence level is high (100%)
Is compromised? : False
First seen:2026-10-30 00:32:48 UTC
Last seen:never
UUID:6ee97d7a-d3f9-11f1-a74e-42010aa4000a
Reporter Tuxxin
Reward 5 credits from ThreatFox
Tags:etherhiding EtherSnake python
Reference: https://otx.alienvault.com/pulse/6ae3bfb84d9eef27054f3fce

Avatar
Tuxxin
EtherSnake Python backdoor C2 written to the operator mirror contracts 0x044dc768b0c0834fea13a436fde1a6326347886d and 0xf07ae5365e433c0e559514d23abb6dbd786cf4ad (getter 0x7d434425), alongside contract 0x41179162599919ad4eadcabc2cfefc1133269c2c. Snoopy Triage by Tuxxin LLC (Tuxxin.com)