imersaomaster.com.br
Classification: Malicious
imersaomaster.com.br is a malicious hostname. Linked to Qakbot malware. Reported by Maltiverse and ThreatFox Abuse.ch, last seen 2023-07-05.
Current activity
- Offline — no longer resolving. Last online 2024-04-27 04:29:35.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Intrusion sets: APT37 (G0067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Apt37 | Maltiverse | 2023-07-04 04:28:52 | 2023-07-05 20:51:23 | malicious-activity | G0067 APT37 |
| QakBot | ThreatFox Abuse.ch | 2023-06-20 12:18:34 | 2023-06-20 12:18:34 | malicious-activity | S0650 QakBot |
Tags
apt bb33 js qakbot qbot quakbot oakboat pinkslipbotIP addresses resolved by this hostname
- 162.241.62.251 (2024-04-27 04:29:35)
- 50.6.138.79 (2023-07-26 10:01:06)
- 50.6.138.129 (2023-09-10 05:18:34)
- 84.32.84.32 (2023-10-30 07:34:23)
Whois information
- AS name
- AS32392 Ecommerce Corporation
- Domain
- imersaomaster.com.br
- TLD
- com.br
- First indexed
- 2023-06-20 12:18:34
- Last updated
- 2026-09-18 06:05:35