IOC LOOKUP
// SEARCH IP, DOMAIN, HASH, OR URL AGAINST OTX THREAT INTELLIGENCE
Indicator of Compromise Search
✦ IPv4 Address
✦ Domain
✦ MD5/SHA1/SHA256 Hash
✦ URL
INDICATOR
a77becccca5571c00ebc9e516fd96ce8
75
/100
HIGH
CONFIDENCE LEVEL
THREAT CONFIDENCE ANALYSIS
HIGH
75/100 confidence
Strong evidence of malicious activity across multiple sources. Prioritise investigation.
CLEAN
LOW
MED
HIGH
CRIT
0
25
50
75
100
OTX
30/30
10 pulses
VIRUSTOTAL
35/35
38/76 detected
ABUSEIPDB
—/25
IPv4 only
URLHAUS
10/10
LISTED
General Information
| Hash | a77becccca5571c00ebc9e516fd96ce8 |
| File Type | FileHash-SHA1 |
AlienVault OTX Analysis
↗ View on OTX
10
PULSE HITS
| Pulse Hits | 10 |
| Indicator Type | MD5 |
| Threat Level |
ASSOCIATED PULSES
| PULSE NAME | DATE |
|---|---|
| 2024-07-15 | |
| 2024-06-06 | |
| 2024-11-09 | |
| 2024-06-28 | |
| 2024-07-15 |
VirusTotal Analysis
↗ View on VirusTotal
38/76
DETECTIONS
MALICIOUS
| Malicious | 38 |
| Suspicious | 0 |
| Harmless | 0 |
| Undetected | 24 |
| Reputation | -10 |
| File Name | ok.hta |
| File Type | VBA |
| File Size | 2.3 KB |
TOP DETECTIONS
| VENDOR | RESULT |
|---|---|
| ALYac | Trojan.Downloader.Script.gen |
| AVG | Script:SNH-gen [Drp] |
| AhnLab-V3 | Downloader/HTA.DarkGate.SC199621 |
| Antiy-AVL | Trojan/VBS.DarkGate |
| Arcabit | Trojan.Generic.D243E7C8 |
| Avast | Script:SNH-gen [Drp] |
| Avira | VBS/Dldr.Agent.5c2042 |
| BitDefender | Trojan.Generic.38004680 |
| CAT-QuickHeal | PS.DARKGATE.48751 |
| CTX | txt.trojan.darkgate |
URLhaus (abuse.ch)
↗ View on URLhaus
⚠ LISTED
URLHAUS
| URLs Found | 1 |
| First Seen | 2024-05-16 |
| Malware | DarkGate |
| File Type | hta |
ASSOCIATED URLs
| URL | STATUS / TYPE | DATE |
|---|---|---|
| https://www.rockcreekdds.com/wp-content/1.hta | offline | — |