🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://gl.githack.com/wiktor1992/53ffa7-d630-49af-a405-7e7278271132/-/raw/main/30-9434283BDFec.

Database Entry


IOC ID:2021623
IOC: https://gl.githack.com/wiktor1992/53ffa7-d630-49af-a405-7e7278271132/-/raw/main/30-9434283BDFec
IOC Type :url
Threat Type :payload_delivery
Malware: ClearFake
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-11-09 07:51:20 UTC
Last seen:never
UUID:d409e305-dbf7-11f1-a74e-42010aa4000a
Reporter nr0ps
Reward 5 credits from ThreatFox
Tags:ClickFix etherhiding gitlab Windows

Avatar
nr0ps
Windows stage URL named in the lure currently stored in BSC-testnet contract 0x46790e2Ac7F3CA5a7D1bfCe312d11E91d23383Ff, statically decoded from get() (0x6d4ce63c), 2026-11-09 04:41 UTC. These values rotate within hours. The file was not fetched.