ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://kvaka.li/1210776429.php.

Database Entry


IOC ID:2421
IOC: http://kvaka.li/1210776429.php
IOC Type :url
Threat Type :botnet_cc
Malware: Azorult
Malware alias:PuffStealer, Rultazo
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
First seen:2021-02-18 18:45:21 UTC
Last seen:2026-06-08 10:21:28 UTC
UUID:746427d1-7219-11eb-9b6b-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:AZORult
Reference: https://bazaar.abuse.ch/sample/95d91febc45d03c1ee477c127bcbd332cd6fbce1e91105004af723594e6f0199/

Avatar
abuse_ch
azorult (aka PuffStealer,Rultazo) botnet C2