C2
Key: flyingbbird.cc · Resolved IP: —
— / AS— / —
Protocols: https · Ports: 34567
First view: 2026-04-02 20:30:40 CEST · Last view: 2026-04-07 16:05:59 CEST
— / AS— / —
Protocols: https · Ports: 34567
First view: 2026-04-02 20:30:40 CEST · Last view: 2026-04-07 16:05:59 CEST
Endpoints
| ID | Protocol | Port | First view | Last view | SubmitURIs | Paths | URLs | Seen in |
|---|---|---|---|---|---|---|---|---|
| https:34567 | https | 34567 | 2026-04-02 20:30:40 CEST | 2026-04-07 16:05:59 CEST | /windebug/updcheck.php, /hello/flash.php | /updates |
4
sample
|
2 |
Raw JSON
{
"Endpoints": {
"https:34567": {
"Firsttime": 1775154640.101391,
"lasttime": 1775570759.6115985,
"paths": [
"/updates"
],
"port": "34567",
"protocol": "https",
"seen_in": [
{
"arch": "x86",
"beacon_ip": "123.58.64.57",
"beacon_port": "34567",
"config_hash": "824813f1615201d8fbbadbb29fabc391104ca2ecb21ac311cfb43ed6dfbbe1ee",
"trial": false,
"ts": 1775570754.7994437,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 987654321
},
{
"arch": "x64",
"beacon_ip": "123.58.64.57",
"beacon_port": "34567",
"config_hash": "927ca4ccb7a1ca23277ba7e44f628d0dec11a615c468b192008284aa053ffdd6",
"trial": false,
"ts": 1775570759.6115985,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 987654321
}
],
"submituris": [
"/windebug/updcheck.php",
"/hello/flash.php"
],
"urls": [
"https://flyingbbird.cc:34567/updates/windebug/updcheck.php",
"https://flyingbbird.cc:34567/windebug/updcheck.php",
"https://flyingbbird.cc:34567/hello/flash.php",
"https://flyingbbird.cc:34567/updates/hello/flash.php"
]
}
},
"Firsttime": 1775154640.101391,
"Host": "flyingbbird.cc",
"IP": null,
"IPs": [],
"Paths": [
"/updates"
],
"Ports": [
"34567"
],
"Protocols": [
"https"
],
"SubmitURIs": [
"/windebug/updcheck.php",
"/hello/flash.php"
],
"URLs": [
"https://flyingbbird.cc:34567/updates/windebug/updcheck.php",
"https://flyingbbird.cc:34567/windebug/updcheck.php",
"https://flyingbbird.cc:34567/hello/flash.php",
"https://flyingbbird.cc:34567/updates/hello/flash.php"
],
"lasttime": 1775570759.6115985
}