hbx5adg6vk.de
Classification: Malicious
hbx5adg6vk.de is a malicious hostname. Linked to Windshift activity. Reported by 2 threat sources, last seen 2023-05-13.
Current activity
- Offline — no longer resolving. Last online 2023-07-01 12:44:36.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Intrusion sets: WINDSHIFT (G0112)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Bahamut | ThreatFox Abuse.ch | 2023-05-11 15:00:04 | 2023-05-13 14:18:39 | malicious-activity | G0112 Windshift |
| Botnet C&C | Maltiverse | 2023-05-04 11:47:18 | 2023-05-04 11:47:18 |
Tags
bahamut viriback c2 c&cIP addresses resolved by this hostname
- 172.64.80.1 (2023-06-27 15:45:38)
- 127.0.0.1 (2023-07-01 12:44:36)
Whois information
- Domain
- hbx5adg6vk.de
- TLD
- de
- First indexed
- 2023-05-04 11:47:18
- Last updated
- 2025-09-23 18:19:33