C2
Key: skynet-i.asuscomm.com · Resolved IP: 85.175.101.203
RU / AS25490 / STC-AS OJSC Southern Telecommunications Company
Protocols: http · Ports: 80
First view: 2026-09-08 16:05:12 CEST · Last view: 2026-09-24 16:06:53 CEST
RU / AS25490 / STC-AS OJSC Southern Telecommunications Company
Protocols: http · Ports: 80
First view: 2026-09-08 16:05:12 CEST · Last view: 2026-09-24 16:06:53 CEST
Endpoints
| ID | Protocol | Port | First view | Last view | SubmitURIs | Paths | URLs | Seen in |
|---|---|---|---|---|---|---|---|---|
| http:80 | http | 80 | 2026-09-08 16:05:12 CEST | 2026-09-24 16:06:53 CEST | /BUYTHEAPTDETECTORNOW | /zOMGAPT |
2
sample
|
10
hashes
|
Raw JSON
{
"Endpoints": {
"http:80": {
"Firsttime": 1788876312.57381,
"lasttime": 1790258813.373149,
"paths": [
"/zOMGAPT"
],
"port": "80",
"protocol": "http",
"seen_in": [
{
"arch": "x86",
"beacon_ip": "85.175.101.203",
"beacon_port": "80",
"config_hash": "5b55367d7cfae2106dc561f0f63ddd18c8a930bc74cc62026b8f52749ce1b8ed",
"trial": false,
"ts": 1788905111.5256057,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 987654321
},
{
"arch": "x64",
"beacon_ip": "85.175.101.203",
"beacon_port": "80",
"config_hash": "1e1ca215b695a9098697e1ec0e03c2e129a682aa32d1ad31fb94e8347441a558",
"trial": false,
"ts": 1788905112.4399621,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 987654321
},
{
"arch": "x86",
"beacon_ip": "85.175.101.203",
"beacon_port": "80",
"config_hash": "6e7298775bfe3879470f26b578c1d37e77855d49d686aa3f18161bff3d026705",
"trial": false,
"ts": 1788962737.4500759,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 987654321
},
{
"arch": "x64",
"beacon_ip": "85.175.101.203",
"beacon_port": "80",
"config_hash": "13bd1c78402fdc794c9cb73929b7fbfadf83ee7605b90c8a4f6ea0fc54471467",
"trial": false,
"ts": 1788962738.3099952,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 987654321
},
{
"arch": "x86",
"beacon_ip": "85.175.101.203",
"beacon_port": "80",
"config_hash": "01be773922734c96b87263627164d671d3f8ad908e9a3390e01ec9fe49db3172",
"trial": false,
"ts": 1789452305.223191,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 987654321
},
{
"arch": "x64",
"beacon_ip": "85.175.101.203",
"beacon_port": "80",
"config_hash": "dccb3b6b0fea600b69c40829b567a812ab2bab601bb9e56abd968f7ce98f6677",
"trial": false,
"ts": 1789452306.3657076,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 987654321
},
{
"arch": "x86",
"beacon_ip": "85.175.101.203",
"beacon_port": "80",
"config_hash": "94109db66f21cfba9c368fe5cde36628dfe6da682a651c82f07d5787ceb78b86",
"trial": false,
"ts": 1789567538.9453416,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 987654321
},
{
"arch": "x64",
"beacon_ip": "85.175.101.203",
"beacon_port": "80",
"config_hash": "23deb8b410d4d176a5c8a5805a442d61979de44fbbc2053469201da74ec024c4",
"trial": false,
"ts": 1789567549.90084,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 987654321
},
{
"arch": "x86",
"beacon_ip": "85.175.101.203",
"beacon_port": "80",
"config_hash": "b0840ab80a4878558b0cb94fdb819cb9e04a8636d6eb575b0b422087f31697c3",
"trial": false,
"ts": 1790258812.4312232,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 987654321
},
{
"arch": "x64",
"beacon_ip": "85.175.101.203",
"beacon_port": "80",
"config_hash": "f07064b696bc37fd8e9d6777232df7b1af40d607593ac4b55e8562521504e23e",
"trial": false,
"ts": 1790258813.373149,
"version": "Cobalt Strike 4.9 (Sep 19, 2023)",
"watermark": 987654321
}
],
"submituris": [
"/BUYTHEAPTDETECTORNOW"
],
"urls": [
"http://skynet-i.asuscomm.com:80/BUYTHEAPTDETECTORNOW",
"http://skynet-i.asuscomm.com:80/zOMGAPT/BUYTHEAPTDETECTORNOW"
]
}
},
"Firsttime": 1788876312.57381,
"Host": "skynet-i.asuscomm.com",
"IP": "85.175.101.203",
"IPs": [
"85.175.101.203"
],
"Paths": [
"/zOMGAPT"
],
"Ports": [
"80"
],
"Protocols": [
"http"
],
"SubmitURIs": [
"/BUYTHEAPTDETECTORNOW"
],
"URLs": [
"http://skynet-i.asuscomm.com:80/BUYTHEAPTDETECTORNOW",
"http://skynet-i.asuscomm.com:80/zOMGAPT/BUYTHEAPTDETECTORNOW"
],
"ip_enrichment": {
"85.175.101.203": {
"ASN": {
"number": 25490,
"org": "STC-AS OJSC Southern Telecommunications Company"
},
"GEO": {
"country": "RU",
"country_name": "Russia",
"lat": 60.0,
"lon": 100.0
},
"first": 1788876312.57381,
"last": 1788876313.6676254,
"meta": {
"build_db": "2025-10-14 12:06:54",
"db_source": "GeoOpen-Country-ASN"
},
"source": "ip.circl.lu",
"updated": 1788876345.395594
}
},
"lasttime": 1790258813.373149
}