🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://93.152.209.8:9445/clickfix/AYN9iXh1hl/file.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:2018194
IOC: https://93.152.209.8:9445/clickfix/AYN9iXh1hl/file
IOC Type :url
Threat Type :payload_delivery
Malware: Unknown Loader
Confidence Level : Confidence level is high (90%)
Is compromised? : False
ASN:AS58215 Omniline-net-as
Country:- CZ
First seen:2026-11-06 19:08:28 UTC
Last seen:never
UUID:8e1434b7-da0c-11f1-a74e-42010aa4000a
Reporter fbazs
Reward 5 credits from ThreatFox
Tags:ClickFix hhunter PluginDex
Reference: https://web.archive.org/web/20261106172412/https://plugin-dex.cc/svvv2.ps1

Avatar
fbazs
Second-stage download URL hardcoded in the ClickFix stager https://plugin-dex.cc/svvv2.ps1 (Wayback copy 2026-11-06). Expected content: a ZIP holding an MSI installed silently. Same host as the hhunter C2 93.152.209.8:8443. Content of the ZIP not observed.