galala.ru

Classification: Malicious

galala.ru is a malicious hostname. Linked to Smoke Loader malware. Reported by ThreatFox Abuse.ch (SmokeLoader), last seen 2021-12-06.

Current activity

Online — resolving/reachable. Last checked 2026-10-17 16:34:56.

MITRE ATT&CK associations

Malware families: SMOKE LOADER (S0226)

Blacklist sightings

Description	Source	First seen	Last seen	Labels	MITRE ATT&CK
Top Popularity Site	Cisco Umbrella	2024-07-28 11:24:17	2025-05-11 19:07:35	benign
SmokeLoader	ThreatFox Abuse.ch	2021-12-04 06:53:54	2021-12-06 00:07:17	malicious-activity	S0226 Smoke Loader

Tags

dofoil sharik smoke smoke loader

IP addresses resolved by this hostname

195.24.68.11 (2021-12-05 00:05:09)
31.31.205.163 (2026-10-17 16:34:56)

Whois information

AS name: AS25537 Jsc ru-center
Domain: galala.ru
TLD: ru
Nameservers: ns1.reg.ru., ns2.reg.ru.
Registrant: REGRU-RU
Domain created: 2023-03-22 02:37:34
Domain expires: 2027-03-22 02:37:34
First indexed: 2021-12-05 00:05:09
Last updated: 2026-10-17 16:34:56