🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://gl.githack.com/rytu08-74/cc2f-bf9b9-76a8-f5-a-0a43c2/-/raw/main/4-4dEA-d-b803.

Database Entry


IOC ID:2021624
IOC: https://gl.githack.com/rytu08-74/cc2f-bf9b9-76a8-f5-a-0a43c2/-/raw/main/4-4dEA-d-b803
IOC Type :url
Threat Type :payload_delivery
Malware: ClearFake
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-11-09 07:51:20 UTC
Last seen:never
UUID:d4887b25-dbf7-11f1-a74e-42010aa4000a
Reporter nr0ps
Reward 5 credits from ThreatFox
Tags:ClickFix etherhiding gitlab Windows

Avatar
nr0ps
Windows stage URL named in the lure currently stored in BSC-testnet contract 0x4a0e8ac014cafcb0aff9e90f68d6c0e0c031360d, statically decoded from get() (0x6d4ce63c), 2026-11-09 04:41 UTC. These values rotate within hours. The file was not fetched.