ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://83.220.170.182/poolcore/loggame/record/system/prod/cutlocalframe/systemframegameframe/pluginlog/searchersystemanti/limitWarbin/scriptCambootframe/geoApiLinuxflower.php.

Database Entry


IOC ID:229535
IOC: http://83.220.170.182/poolcore/loggame/record/system/prod/cutlocalframe/systemframegameframe/pluginlog/searchersystemanti/limitWarbin/scriptCambootframe/geoApiLinuxflower.php
IOC Type :url
Threat Type :botnet_cc
Malware: DCRat
Malware alias:DarkCrystal RAT
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS29182 RU-JSCIOT
Country:- RU
First seen:2021-10-01 15:47:54 UTC
Last seen:never
UUID:f0d4b4a7-22ce-11ec-a35f-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:dcrat

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-12-31 08:45:38 c71439ec2f01c3e2a79ee3c88f0d7bd905b8be3b0de1cebe587500149c23a0a3
2021-10-01 15:47:57 4ad2bc141f8016e37fcc4fa80d574d42d8cbc4244ca913174ae38b7000f3ce09