Elektrine
Log in Register

#purelogs

2 posts · Last used Aug 03

𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @netresec@infosec.exchange
· 2mo ago
Replying to
@james_inthe_box@infosec.exchange Thank you for sharing! The #PureLogs C2 server seems to be on 2.27.62.123:4449 Turns out JoeSandbox has history for that C2 server since at least 2026-04-08. https://www.joesandbox.com/analysis/search?ioc-public-ip=2.27.62.123
joesandbox.com
1
2
0
0
James_inthe_box @james_inthe_box@infosec.exchange
· 2mo ago
Handful of IOC's for those .js #purelogs #stealer #malspams: https://app.any.run/tasks/43e561e4-707a-4189-8b4c-d4795b2451a6 Exfil port is 4449 Calls hidden Edge Calls hidden Chrome
Analysis SOA 729082610.js (MD5: 7A88A0D3A722B150F9650187EC4E292F) Malicious activity - Interactive analysis ANY.RUN
app.any.run

Analysis SOA 729082610.js (MD5: 7A88A0D3A722B150F9650187EC4E292F) Malicious activity - Interactive analysis ANY.RUN

Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.

3
3
1
0
You've seen all posts