Derp.ca
Malware family

FleshStealer

Profile source: Mallory opens in a new tab

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Jul 18, 2026
Last activity
Jul 18, 2026
Feed role
C2
Host form
1 IP / 0 hostnames

Leading locations

  • RU1

Leading providers

  • JSC TIMEWEB1

Infrastructure traits

  • Hosting 1

Samples

Recent associated samples

4e5cc8cb98584335400d00f0a0803c3e0202761f3fbe50bcab3858a80df255e1
Observed Jul 18, 2026Triage

Reporting

Research mentioning FleshStealer

Jun 3
Huntress

Infostealers Crash Course: A Tradecraft Tuesday Recap | Huntress

FleshStealer : Targets Chromium-based web browsers for credentials and cookies, as well as 2FA passwords or Wi-Fi network credentials

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

adam:ONE opens in new tab Tria.ge opens in new tab IPinfo opens in new tab urlscan.io opens in new tab eCrime.ch opens in new tab Mallory opens in new tab