185.215.113[.]15IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 3 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Package deal: Malware bundles causing disruption and damage across EMEA“The following C2 was used during the stealer’s operation: 185.215.113[.]15/Lkb2dxj3/index.php.”
Indicators reported together
named in the same reports- hxxps://digitalfitsoft[.]comin 1 report
- digitalfitsoft[.]comin 1 report
- hxxps://installmentloan7vrt[.]orgin 1 report
- installmentloan7vrt[.]orgin 1 report
- soft-you[.]comin 1 report
Copy these 5 indicators · defanged
Thanks — we review every report.