Derp.ca
Data by Hatching Triage opens in a new tab

coffloader

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Aug 6, 2026
Last activity
Aug 7, 2026
Feed role
C2 / Distribution
Host form
11 IP / 8 hostnames

Leading locations

  • US8
  • CN6
  • NL4
  • HK1

Leading providers

  • Microsoft Corporation8
  • Telegram Messenger Inc4
  • China Broadcasting TV Net1
  • China Telecom (Group)1
  • CHINA UNICOM China169 Backbone1
  • China Unicom Shanghai network1

Infrastructure traits

  • Hosting 13

Samples

Recent associated samples

eedd2f43b0d8f13224fd8c3b59f506ac8c2f29d91a171a82ee78e07ff71e0888
Observed Aug 7, 2026Triage
4434ceccf307fec9d95789d6eb5496561a0612ee5ce47951f1a6b31a2c7a3067
Observed Aug 7, 2026Triage
8ac5a2344e0d866abb491eb54060029ea890810f52cd12f0040a6151b251f269
Observed Aug 7, 2026Triage
135688affe6e079761bdddba4b571a080910d3be8c12f1bef320ea418e1a9d02
Observed Aug 6, 2026Triage
fdb7e4641f8324c4f2cc05785cc154238e1cf0ab65f18e8ff3e49e57859051d1
Observed Aug 6, 2026Triage

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

Hatching Triage opens in new tab IPinfo opens in new tab urlscan.io opens in new tab Mallory opens in new tab eCrime.ch opens in new tab ransomware.live opens in new tab