configuration value
Samples sharing one endpoint
4 samples carry this endpoint in their configuration. 1 host was observed serving them. These samples are built to connect to the same endpoint. It may be a redirector or a hijacked host, so a shared endpoint is not evidence of a single operator.
The value
endpoint13.212.206.34:80
Written into each sample by whoever built it.
The Suricata rules cover the hosts still listed; withdrawn hosts can stay in them for up to five minutes. The YARA rules match the sample hashes. The JSON is this page's data.
1 host
Hosts this archive observed serving these samples; 1 still listed.
4 samples
- c53e73b8af8f26fba4f508d06f1c5334d10dab6414f32c5811c81b7d8c8ee1ce VShell file analysis · last seen 2026-10-06 00:06 · served by 13.212.206.34:80
- a8da041adc80e9c9b68f445ed9b78ae1a27a36851e70f2fc27369e23596d9d29 VShell file analysis · last seen 2026-10-06 00:06 · served by 13.212.206.34:80
- f6198ec85ce7c59a02c37636709ea2eb1ffccc9b05a99e9f9b223ce8df1c65f1 VShell file analysis · last seen 2026-10-06 00:06 · served by 13.212.206.34:80
- 51bc541b6aa1d6e574b203e73810d63f4846bf71b57b684d3dec5200306234a6 VShell sandbox run · last seen 2026-10-06 00:06 · served by 13.212.206.34:80