http://www.tibiadb.com/exes/MagebotSetupvT852.exe
Classification: Malicious
http://www.tibiadb.com/exes/MagebotSetupvT852.exe is a malicious URL. Linked to Emotet malware. 48 sightings from Threat Observatory, last seen 2026-11-07.
Current activity
- Offline — no longer resolving. Last online 2026-11-07 06:16:39.
- Command & Control server — Used by cybercriminals to control victim computers.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: EMOTET (S0367)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in BR, across technology networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Emotet | Maltiverse Threat Observatory | 2026-10-26 09:21:18 | 2026-11-07 05:21:13 | country_code:br industry:technology-and-telecommunications malicious-activity malware | S0367 Emotet |
URL information
- Hostname
- www.tibiadb.com
- Domain
- tibiadb.com
- TLD
- com
- SHA-256
fc101370af6374c3617e0814b58bf4d6d5133fa4def2a652f449c309e5c7003d- First indexed
- 2026-10-26 09:25:25
- Last updated
- 2026-11-07 06:16:39
- Last online
- 2026-11-07 06:16:39