https://couldinstallup.com
Classification: Malicious
https://couldinstallup.com is a malicious URL. Linked to Zebrocy malware. 35 sightings from Threat Observatory and ThreatFox Abuse.ch, last seen 2026-07-06.
Current activity
- Offline — no longer resolving. Last online 2026-10-13 10:19:47.
- Command & Control server — Used by cybercriminals to control victim computers.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: ZEBROCY (S0251)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in BR, across education, manufacturing and technology networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Zebrocy | Maltiverse Threat Observatory | 2026-07-06 07:30:05 | 2026-07-06 07:50:04 | botnet country_code:br industry:education-and-nonprofits industry:manufacturing industry:technology-and-telecommunications malicious-activity | S0251 Zebrocy |
| Generic Malware | Maltiverse Threat Observatory | 2026-07-05 22:10:10 | 2026-07-05 22:10:10 | country_code:br industry:manufacturing industry:technology-and-telecommunications malicious-activity malware | |
| Zebrocy | ThreatFox Abuse.ch | 2026-07-05 21:08:31 | 2026-07-05 21:25:03 | malicious-activity | S0251 Zebrocy |
Tags
g0129 minirecon mustangpanda toneshell websocket-c2 zekapabURL information
- Hostname
- couldinstallup.com
- Domain
- couldinstallup.com
- TLD
- com
- SHA-256
e3ebb22374131e36b996900fa728a776e937305d4c55c124b6d970bfbe685039- First indexed
- 2026-07-05 21:25:03
- Last updated
- 2026-10-13 10:19:47
- Last online
- 2026-10-13 10:19:47