graphicforests.com
Classification: Malicious
graphicforests.com is a malicious hostname. Linked to Qakbot malware. Reported by Maltiverse and ThreatFox Abuse.ch, last seen 2023-07-05.
Current activity
- Offline — no longer resolving. Last online 2024-07-07 20:45:56.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Intrusion sets: APT37 (G0067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Apt37 | Maltiverse | 2023-07-04 04:28:52 | 2023-07-05 20:51:22 | malicious-activity | G0067 APT37 |
| QakBot | ThreatFox Abuse.ch | 2023-06-20 12:18:45 | 2023-06-20 12:18:45 | malicious-activity | S0650 QakBot |
Tags
apt bb33 js qakbot qbot quakbot oakboat pinkslipbotIP addresses resolved by this hostname
- 38.242.252.66 (2024-07-07 20:45:56)
- 107.152.42.184 (2024-04-19 12:36:03)
Whois information
- AS name
- AS11878 tzulo, inc.
- Domain
- graphicforests.com
- TLD
- com
- First indexed
- 2023-06-20 12:18:45
- Last updated
- 2026-07-12 06:13:02