Post #4278147

2026-07-31 12:28 UTC

Handful of IOC's for those .js #purelogs #stealer #malspams: https://app.any.run/tasks/43e561e4-707a-4189-8b4c-d4795b2451a6 Exfil port is 4449 Calls hidden Edge Calls hidden Chrome

Replies (1)

@netresec@infosec.exchange 2026-08-03 12:44

@james_inthe_box@infosec.exchange Thank you for sharing! The #PureLogs C2 server seems to be on 2.27.62.123:4449 Turns out JoeSandbox has history for that C2 server since at least 2026-04-08. https://www.joesandbox.com/analysis/search?ioc-public-ip=2.27.62.123

Open ##4354555