Skip to content
Derp.ca
Malware
Ransomware
Research
About
Malware
Ransomware
Research
About
Home
/
Coreshell
Coreshell
Also known as: SOURFACE
Linked Threat Actors
APT28
C2 Infrastructure
Hosting/VPS
80%
Unknown
20%
Last 7 days
Jun 19, 2026
C2 Hosts:
5
Daily C2 host counts for the last 7 days
Date
C2 Hosts
Jun 19, 2026
5
Further Reading
malware.prevenity.com
opens in a new tab
malware.prevenity.com
malware-reversing.com
opens in a new tab
malware-reversing.com
www2.fireeye.com
opens in a new tab
www2.fireeye.com
contagiodump.blogspot.de
opens in a new tab
contagiodump.blogspot.de
securelist.com
opens in a new tab
securelist.com
mandiant.com
opens in a new tab
mandiant.com