#StagedC2 config observed at Sat Aug 8 09:43:04 2026 UTC, located at hXXps://pastebin[.]com/raw/SvCsvbKs C2: 0[.]tcp[.]in[.]ngrok[.]io:22574 (IP: 13.200.54.243)