ThreatFox IOC Database
You are viewing the ThreatFox database entry for url https://d3vy30ofci3zh0.cloudfront.net/safebrowsing/U-qy0OYR/6aLYaLZYRGzADEYEkrSzO8x0G07T5T8qm.
Database Entry
IOC ID: | 841579 |
---|---|
IOC: | https://d3vy30ofci3zh0.cloudfront.net/safebrowsing/U-qy0OYR/6aLYaLZYRGzADEYEkrSzO8x0G07T5T8qm |
IOC Type : | url |
Threat Type : | botnet_cc |
Malware: | Cobalt Strike |
Malware alias: | Agentemis, BEACON, CobaltStrike, cobeacon |
Confidence Level : | Confidence level is high (100%) |
First seen: | 2022-08-06 02:17:11 UTC |
Last seen: | never |
UUID: | e181e508-152d-11ed-ab39-42010aa4000a |
Reporter | @drb_ra |
Reward | 5 credits from ThreatFox |
Tags: | CobaltStrike DIGITALOCEAN-ASN |

@drb_ra
Cobalt Strike Server FoundC2: HTTPS @ 164[.]92[.]86[.]93:443
C2 Server: d3vy30ofci3zh0[.]cloudfront[.]net,/safebrowsing/U-qy0OYR/6aLYaLZYRGzADEYEkrSzO8x0G07T5T8qm,cfbc9e53eed6b001[.]azureedge[.]net,/safebrowsing/U-qy0OYR/6aLYaLZYRGzADEYEkrSzO8x0G07T5T8qm
POST URI: /safebrowsing/4gbYByh0/X1Jw9mILTODbWx3jlEtztBoq0nY
Country: United States
ASN: DIGITALOCEAN-ASN