ThreatFox IOC Database
You are viewing the ThreatFox database entry for url https://api.telegram.org/bot1999677510:AAHhNzHnb72ldnvRVF1mzkCYnWBTejckz6s/sendDocument.
Database Entry
This IOC expired
This IOC is an old IOC and hence has expired on 2026-09-15 10:39:25 UTC. We therefore refrain from exporting it into our datasets. As a result, this database entry is purely informational and has no impact.
| IOC ID: | 224066 |
|---|---|
| IOC: | https://api.telegram.org/bot1999677510:AAHhNzHnb72ldnvRVF1mzkCYnWBTejckz6s/sendDocument |
| IOC Type : | url |
| Threat Type : | botnet_cc |
| Malware: | Agent Tesla |
| Malware alias: | AgenTesla, AgentTesla, Negasteal |
| Confidence Level : | Confidence level is high (100%) |
| Is compromised? : | False |
| ASN: | AS62041 Telegram |
| Country: |  VG |
| First seen: | 2021-09-20 19:20:27 UTC |
| Last seen: | never |
| UUID: | d032d9fa-1a47-11ec-830d-42010aa4000a |
| Reporter |  AndreGironda |
| Reward | 5 credits from ThreatFox |
| Tags: | AgentTesla |
| Reference: | https://tria.ge/210920-xdtvesfac5 |
AndreGironda
MITRE T1566.001Date: 20 Sep 2021 17:00-17:30 +0000
Received: from milebluff.com (104.168.204.42)
From: JHintz@milebluff.com
Subject: PACKAGE DELIVERY
Message-ID: <20210920172253.A3B6BB54504B1148@milebluff.com>
Attachment Name: Address verification.iso
Attachment SHA256: c93fc0f2505310406a9a989613864e0114cd816dc580dd3646efe1daf8254a5b
UDF_Encapsulated_Executable Name: Address Verification.exe
Executable SHA256: c8a169a01d9e9282b339a9a73e395ec11d201878773ff45b15e55de3e4be7c5e
Unpacked Executable SHA256: 5c56170167b2e2719a0f625d688b05e283da41a2622127d14791f2fc10effa1d