kazya1.hopto.org

Classification: Malicious

kazya1.hopto.org is a malicious hostname. Linked to Njrat malware. Reported by Hybrid-Analysis and ThreatFox Abuse.ch (MSIL:Bladabindi), last seen 2023-09-29.

Current activity

  • Offline — no longer resolving. Last online 2023-09-29 13:42:57.
  • Command & Control server — Used by cybercriminals to control victim computers.

MITRE ATT&CK associations

Malware families: NJRAT (S0385)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
NjRAT ThreatFox Abuse.ch 2022-05-06 19:18:06 2023-09-29 13:42:57 malicious-activity S0385 njRAT
MSIL:Bladabindi Hybrid-Analysis 2021-12-13 03:00:21 2021-12-13 03:00:21 S0385 njRAT

Tags

c2 historicalandnew njrat bladabindi lime-worm

IP addresses resolved by this hostname

Whois information

AS name
AS6830 Liberty Global Operations B.V.
Domain
hopto.org
TLD
org
First indexed
2021-12-13 03:00:21
Last updated
2026-10-11 10:31:32