rdmfile.eu
Classification: Malicious
rdmfile.eu is a malicious hostname. Linked to Purecrypter malware. 64 sightings from 4 threat sources (Generic Malware, Trojan.generic), last seen 2026-09-28.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 12:37:20.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: PURECRYPTER (S9019)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in US and MX, across technology and healthcare networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Trojan.generic | Maltiverse Threat Observatory | 2026-09-28 06:25:06 | 2026-09-28 06:40:06 | anomalous-activity country_code:us industry:technology-and-telecommunications malware | |
| Generic Malware | Maltiverse Threat Observatory | 2026-09-06 06:10:13 | 2026-09-28 02:15:25 | anomalous-activity country_code:mx country_code:us industry:healthcare-and-pharmaceutical industry:technology-and-telecommunications malware | |
| Unknown malware | ThreatFox Abuse.ch | 2026-09-28 00:38:28 | 2026-09-28 01:25:08 | malicious-activity | |
| Donutloader | Triage | 2026-09-06 05:22:33 | 2026-09-06 05:22:33 | malicious-activity | |
| Quasar | Triage | 2026-01-30 20:46:04 | 2026-01-30 20:46:04 | malicious-activity | |
| Unknown Stealer | ThreatFox Abuse.ch | 2025-12-02 18:36:38 | 2025-12-02 18:36:38 | malicious-activity | |
| PureCrypter | ThreatFox Abuse.ch | 2025-07-17 11:19:07 | 2025-07-19 11:17:49 | malicious-activity | S9019 PureCrypter |
| Malware Download | URLhaus Abuse.ch | 2025-02-02 16:37:39 | 2025-06-09 08:05:04 | malicious-activity |
Tags
exe clickfix rustystealer c2-monitor-auto donutloader quasar defense_evasion discovery execution loader persistence ransomware spyware trojan ud adware credential_access privilege_escalation stealerIP addresses resolved by this hostname
- 51.38.160.186 (2025-04-22 00:19:25)
- 163.5.121.97 (2025-06-09 08:05:05)
- 89.213.140.21 (2025-07-05 04:05:55)
- 172.67.206.81 (2026-09-25 00:32:13)
- 104.21.37.88 (2026-09-25 00:32:13)
- 172.64.80.1 (2026-10-18 12:37:20)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-18 12:37:20)
Whois information
- Domain
- rdmfile.eu
- TLD
- eu
- First indexed
- 2025-02-02 16:37:39
- Last updated
- 2026-10-18 12:37:20