http://192.169.69.26:8080/
Classification: Malicious
http://192.169.69.26:8080/ is a malicious URL. Linked to Njrat malware. Reported by 2 threat sources, last seen 2025-10-15.
Current activity
- Offline — no longer resolving. Last online 2025-12-12 23:05:48.
- Command & Control server — Used by cybercriminals to control victim computers.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: NJRAT (S0385)
Intrusion sets: APT-C-36 (G0099)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Maltiverse Threat Observatory | 2025-09-16 09:05:09 | 2025-10-15 15:05:09 | country_code:co industry:education-and-nonprofits industry:government-and-public-sector industry:healthcare-and-pharmaceutical | |
| Njrat | Maltiverse Threat Observatory | 2025-10-12 07:05:10 | 2025-10-12 09:15:10 | S0385 njRAT | |
| APT-C-36 | Maltiverse | 2025-10-10 06:18:05 | 2025-10-10 06:18:05 | G0099 APT-C-36 G0099 APT-C-36 | |
| Xworm | Maltiverse Threat Observatory | 2025-10-07 18:05:09 | 2025-10-08 21:05:10 |
Tags
aptURL information
- Direct IP
- 192.169.69.26 — this URL points straight to an IP address, a strong indicator of malicious use.
- SHA-256
4e731d82d24cd1a6b5dba9111f2037be3f81777c215b92798e095946bc4dafcf- First indexed
- 2025-09-16 12:55:10
- Last updated
- 2026-07-14 07:04:25
- Last online
- 2025-12-12 23:05:48