ThreatFox IOC Database
You are viewing the ThreatFox database entry for url https://secure.newsmach.com/Run/Setting/WS9R4E1TP4EF.
Database Entry
IOC ID: | 841271 |
---|---|
IOC: | https://secure.newsmach.com/Run/Setting/WS9R4E1TP4EF |
IOC Type : | url |
Threat Type : | botnet_cc |
Malware: | Cobalt Strike |
Malware alias: | Agentemis, BEACON, CobaltStrike, cobeacon |
Confidence Level : | Confidence level is high (100%) |
First seen: | 2022-08-03 13:33:35 UTC |
Last seen: | never |
UUID: | e02fc8d1-1330-11ed-9772-42010aa4000a |
Reporter | @drb_ra |
Reward | 5 credits from ThreatFox |
Tags: | CHERRYSERVERS2-AS CobaltStrike |

@drb_ra
Cobalt Strike Server FoundC2: HTTPS @ 84[.]32[.]190[.]60:443
C2 Server: newsmach[.]com,/Run/Setting/WS9R4E1TP4EF,www[.]newsmach[.]com,/Run/Setting/WS9R4E1TP4EF,secure[.]newsmach[.]com,/Run/Setting/WS9R4E1TP4EF,mail[.]newsmach[.]com,/Run/Setting/WS9R4E1TP4EF
POST URI: /communicate/minimum/1P6L69KHI
Country: Lithuania
ASN: CHERRYSERVERS2-AS