configuration value
Samples sharing one endpoint
3 samples carry this endpoint in their configuration. 1 host was observed serving them. These samples are built to connect to the same endpoint. It may be a redirector or a hijacked host, so a shared endpoint is not evidence of a single operator.
The value
endpoint8.148.184.136:8228
Written into each sample by whoever built it.
The Suricata rules cover the hosts still listed; withdrawn hosts can stay in them for up to five minutes. The YARA rules match the sample hashes. The JSON is this page's data.
1 host
Hosts this archive observed serving these samples; 1 still listed.
3 samples
- 384f9422e9b40c7ef0f0021a440a06f90f293fe0ad300ca20be8c8094ab25050 VShell file analysis · last seen 2026-10-05 09:09 · served by 8.148.184.136:8228
- dfb19090f041f61a131cf1a9451cda8a144cb6137a0ae8dbd57b16a7ff8a4c9b VShell file analysis · last seen 2026-10-05 09:09 · served by 8.148.184.136:8228
- 4e9a5be0eb87d0fcb1d73a3376d4ec709e7489949eaffc4ed476286c6459cbb3 VShell file analysis · last seen 2026-10-05 09:09 · served by 8.148.184.136:8228