ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://www.bengalcement.com.bd/AxPu/index.php.

Database Entry


IOC ID:64341
IOC: http://www.bengalcement.com.bd/AxPu/index.php
IOC Type :url
Threat Type :botnet_cc
Malware: Azorult
Malware alias:PuffStealer, Rultazo
Confidence Level : Confidence level is elevated (75%)
ASN:AS32475 SINGLEHOP-LLC
Country:- US
First seen:2021-05-26 13:00:24 UTC
Last seen:2023-09-27 14:01:42 UTC
UUID:560b9cf8-be22-11eb-b17b-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:AZORult
Reference: https://bazaar.abuse.ch/sample/d18db9c01ea7cd1e601ee79c9b18ecd3604bda94fe2ac738547946a72e281788/

Avatar
abuse_ch
azorult (aka PuffStealer,Rultazo) botnet C2

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-05-27 08:55:06 f1ab8e352e53ee2d4aa8625e789682ca1a5ef4adaba22b1ba7ce3d68664bcb2e
2021-05-26 16:58:54 e322e8349dbf5db2aa3169503472febc300260eafae32ccb853162ed517b7e63