TROYANOSYVIRUS
Back to URLs

modbus.shocked-darken.lat

https://modbus.shocked-darken.lat/sh5hne-c8b9b4-sskjy-znq2k2of-ybay3z/usr294-verif.confirm

offlinemalware_downloadSource: urlhaus

URL Details

Hostmodbus.shocked-darken.lat
Schemehttps
Path/sh5hne-c8b9b4-sskjy-znq2k2of-ybay3z/usr294-verif.confirm
TLDlat
Registered Domainshocked-darken.lat
Host Typefqdn
Date Added5/4/2026, 7:33:07 PM
Last Online5/4/2026, 7:33:07 PM
First Seen5/4/2026, 7:33:07 PM
Last Seen5/4/2026, 7:33:07 PM

Tags

ClearFakeSnappyClient

IOC Correlations

urldomain: modbus.shocked-darken.lat(hosted_on)80%