ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://alfawood.us/mkdgs/index.php.

Database Entry


IOC ID:7097
IOC: http://alfawood.us/mkdgs/index.php
IOC Type :url
Threat Type :botnet_cc
Malware: Azorult
Malware alias:PuffStealer, Rultazo
Confidence Level : Confidence level is elevated (75%)
First seen:2021-04-07 06:10:05 UTC
Last seen:2023-09-27 14:01:13 UTC
UUID:e5793d59-9767-11eb-858b-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:AZORult
Reference: https://bazaar.abuse.ch/sample/d1b9a434579f456d75afe539d5b100d21cd57115bdf946c684dd9ec4e02996aa/

Avatar
abuse_ch
azorult (aka PuffStealer,Rultazo) botnet C2

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-04-08 01:45:06 fe74f2726a9eeca44293fa7e9ad023ff0765a4474525bd834a379e21d2bc281e
2021-04-07 08:25:07 fe4e3fc81c2e5028cde6ef0a91ac901fa6b5e0e5e2cd6d68070a9f45cc3a4b69