ThreatFox IOC Database
You are viewing the ThreatFox database entry for url http://137.220.60.12:8081/ga.js.
Database Entry
IOC ID: | 841546 |
---|---|
IOC: | http://137.220.60.12:8081/ga.js |
IOC Type : | url |
Threat Type : | botnet_cc |
Malware: | Cobalt Strike |
Malware alias: | Agentemis, BEACON, CobaltStrike, cobeacon |
Confidence Level : | Confidence level is high (100%) |
First seen: | 2022-08-05 20:02:08 UTC |
Last seen: | never |
UUID: | 7caa6319-14f9-11ed-a58b-42010aa4000a |
Reporter | @drb_ra |
Reward | 5 credits from ThreatFox |
Tags: | AS-CHOOPA CobaltStrike |

@drb_ra
Cobalt Strike Server FoundC2: HTTP @ 137[.]220[.]60[.]12:8081
C2 Server: 137[.]220[.]60[.]12,/ga[.]js
POST URI: /submit[.]php
Country: United States
ASN: AS-CHOOPA