ThreatFox IOC Database
You are viewing the ThreatFox database entry for url https://api.telegram.org/bot1816395306:AAE3ZBLYV2L9aT9mL8itL9vr3RP6nOz_B1o/sendMessage?chat_id=1368673464.
Database Entry
This IOC expired
This IOC is an old IOC and hence has expired on 2026-09-15 10:39:25 UTC. We therefore refrain from exporting it into our datasets. As a result, this database entry is purely informational and has no impact.
| IOC ID: | 230251 |
|---|---|
| IOC: | https://api.telegram.org/bot1816395306:AAE3ZBLYV2L9aT9mL8itL9vr3RP6nOz_B1o/sendMessage?chat_id=1368673464 |
| IOC Type : | url |
| Threat Type : | botnet_cc |
| Malware: | 404 Keylogger |
| Malware alias: | 404KeyLogger, Snake Keylogger |
| Confidence Level : | Confidence level is high (100%) |
| Is compromised? : | False |
| ASN: | AS62041 Telegram |
| Country: |  VG |
| First seen: | 2021-10-04 14:38:01 UTC |
| Last seen: | never |
| UUID: | ad334e40-2520-11ec-a35f-42010aa4000a |
| Reporter |  AndreGironda |
| Reward | 5 credits from ThreatFox |
| Tags: | 404keylogger Snake SnakeKeylogger |
| Reference: | https://tria.ge/211004-rpp3qagdg8 |
AndreGironda
MITRE T1566.001Date: Mon, 04 Oct 2021 11:00-11:30 +0100
Received: from unknown [23.105.131.220]
Content-Type: multipart/mixed; boundary="===============1480346450=="
MIME-Version: 1.0
Subject: Listado de facturas pendientes a 30 de Septiembre de 2021
To: Recipients <contabilidad@depau.com>
From: "Dpto. Contabilidad" <contabilidad@depau.com>
Message-ID: <13e5c663-01ad-4660-9c7b-c491f5d32458@CO1NAM11FT065.eop-nam11.prod.protection.outlook.com>
Return-Path: contabilidad@depau.com
Attachment Name: 2421PENDIENTES092021.lha
Attachment SHA256: fda67f9a204aa02801e0ced1442bbc3ecab563e6e4299509e92e5ac3a7e00946
Executable Name: 2421PENDIENTES092021-034.exe
Executable SHA256: e2b899baa7500884e7dbe9219f641996f11ed287b17abcce04764815d64895ae