ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://62.197.136.186/kendrick/index.php.

Database Entry


IOC ID:456111
IOC: http://62.197.136.186/kendrick/index.php
IOC Type :url
Threat Type :botnet_cc
Malware: Azorult
Malware alias:PuffStealer, Rultazo
Confidence Level : Confidence level is elevated (75%)
ASN:AS6762 SEABONE-NET
Country:- IT
First seen:2022-03-27 20:15:21 UTC
Last seen:2023-09-27 14:04:21 UTC
UUID:a0ef74e6-ae0a-11ec-8c1d-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:AZORult
Reference: https://bazaar.abuse.ch/sample/2b625c9d95399334aa265623e7341745fb784c71c293935b68d892b6939fa09b/

Avatar
abuse_ch
azorult (aka PuffStealer,Rultazo) botnet C2

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-03-27 23:25:57 2b625c9d95399334aa265623e7341745fb784c71c293935b68d892b6939fa09b