hxxps://raw.githubusercontent[.]com/efimovah/abcd/main/xxx.gifURL
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 3 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Dark Pink“$uri = "hxxps://raw.githubusercontent[.]com/efimovah/abcd/main/xxx.gif";”
Indicators reported together
named in the same reports- hxxps://api.telegram[.]org/bot$token/sendDocumentin 1 report
- outlook.com[.]vnin 1 report
- hxxps://ifconfig[.]me/ipin 1 report
- image[.]savein 1 report
- 926027f0308481610c85f4e3e433573bin 1 report
- 24f65e0ee158fc63…014ab239ae16in 1 report
- 9976625b5a3035dc…91548e11301ain 1 report
- 728afa40b20df6d2540648ef845eb754in 1 report
- d8df672ecd9018f3…35c30a54b71din 1 report
- c60f778641942b7b…7bfb245bf775in 1 report
- 7eaf1b65004421ac07c6bb1a997487b2in 1 report
- 18ca159183c98f52…87e17596a866in 1 report
- e3181ee97d3ffd31…33ee7d108736in 1 report
- 732091ad428419247bce87603ea79f00in 1 report
- 142f909c26bd5796…7cdf15910e34in 1 report
- e45df7418ca47a9a…1df9fcc9fd51in 1 report
- hxxps://api.telegram[.]org/bot$in 1 report
Copy these 17 indicators · defanged
Thanks — we review every report.