ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://109.248.42.13/html/_requestSecuredefaultwordpress.php.

Database Entry


IOC ID:842616
IOC: http://109.248.42.13/html/_requestSecuredefaultwordpress.php
IOC Type :url
Threat Type :botnet_cc
Malware: DCRat
Malware alias:DarkCrystal RAT
Confidence Level : Confidence level is high (100%)
ASN:AS52000 MIRhosting
Country:- NL
First seen:2022-08-12 02:05:59 UTC
Last seen:never
UUID:4f2c44e6-19e3-11ed-9870-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:dcrat

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-08-12 07:01:05 20a0f202f1117c1ea96d327fa54dc7fe585c567de51fa373e4dd3a14e5ea26fc
2022-08-12 02:06:02 0e08f591efade89fd04c3fcf4c7f9a4d9665f66d9640148f5a0cd36fde058afb