https://s3.us-east-005.backblazeb2.com/vx-underground-main/Builders/Zer0Day2Rat/Zer0Day2%20Rat%201.8.7z?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=005e2c099359ccf0000000004%2F20260830%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260830T030538Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=3f480a3abadc71ba9ebb99ecb039007e725386463afa476562e1ac07570b2c8c

Classification: Malicious

https://s3.us-east-005.backblazeb2.com/vx-underground-main/Builders/Zer0Day2Rat/Zer0Day2%20Rat%201.8.7z?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=005…

Current activity

  • Offline — no longer resolving. Last online 2026-08-30 03:57:19.
  • Phishing — Hosts a phishing site and is intrinsically malicious.

MITRE ATT&CK associations

Malware families: CHAOS (S0220)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Chaos Triage 2026-08-30 03:05:46 2026-08-30 03:05:46 malicious-activity S0220 Chaos

Tags

chaos defense_evasion discovery evasion execution impact persistence phishing privilege_escalation pyinstaller ransomware spyware stealer

URL information

Hostname
s3.us-east-005.backblazeb2.com
Domain
backblazeb2.com
TLD
com
SHA-256
b391cafe5f2df5f639689a3d1f7ac1152bc34942eed1db504170a8be57d5e7cf
First indexed
2026-08-30 03:05:46
Last updated
2026-08-30 03:57:19
Last online
2026-08-30 03:57:19