146.19.24[.]131IP address
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 5 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Malicious OpenClaw Skill Distributes Remcos RAT and GhostLoader“"url": "tcp+tls://146.19.24[.]131:2404/",”
Indicators reported together
named in the same reports- hxxps://cloudcraftshub[.]com/apiin 1 report
- cloudcraftshub[.]comin 1 report
- 82536825e700f4c863238a90dd314687in 1 report
- 1c267cab0a800a7b2d598bc1b112d5cein 1 report
- 2a5f619c966ef79f4586a433e3d5e7bain 1 report
- hxxp://dropras[.]xyz/in 1 report
- dropras[.]xyzin 1 report
- hxxps://github[.]com/Needvainverter93/deepseek-clawin 1 report
- cc1af839a956c8e2bf8e721f5d3b7373in 1 report
- 2c4b7c8b48e6b4e5f3e8854f2abfedb5in 1 report
- hxxps://trackpipe[.]devin 1 report
- trackpipe[.]devin 1 report
- hxxps://github[.]com/Crestdrasnip/Claude-Zeroclawin 1 report
- hxxps://github[.]com/deborahikssv/Antigravity-clawin 1 report
- hxxps://github[.]com/Rohit24567/HyperLiquid-Clawin 1 report
- hxxps://github[.]com/helenigtxu/TradingView-Clawin 1 report
- hxxps://github[.]com/helenigtxu/blooketin 1 report
- hxxps://github[.]com/FinPyromancerLog/xcode-clawin 1 report
- hxxps://github[.]com/michelleoincx/genspark.ai-openclawin 1 report
- hxxps://github[.]com/michelleoincx/Bunkr-Downloader-Pythonin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.