Last seven days
- First activity
- Jul 14, 2026
- Last activity
- Jul 21, 2026
- Feed role
- C2
- Host form
- 11 IP / 43 hostnames
C2 tracking
Seven-day C2 activity
Derp observations, rolling seven-day window
2 Jul 14
2 Jul 15
3 Jul 16
9 Jul 17
6 Jul 18
4 Jul 19
8 Jul 20
Observed infrastructure
Leading locations
- GB10
- DE9
- RU6
- FR2
- PL2
- CZ1
- FI1
- KZ1
- NL1
- US1
Leading providers
- OOO GETWIFI9
- PLAY2GO INTERNATIONAL LIMITED3
- BrainStorm Network, Inc2
- JSC Selectel2
- Oracle Corporation2
- WIIT AG2
Infrastructure traits
- Hosting 21
- Anycast 1
- Vpn 1
Samples
Recent associated samples
008d9fdfc7296f80df30f50d6afd266026f7bbbdd39b0b4ea80abe13e03f401f Observed Jul 21, 2026Triage
1c650817eb55bec866f014cab638047f16d7d11fdd12049fc64ff1b78bd36e64 Observed Jul 21, 2026Triage
2704b1419edf5890cd6d27956929233ac61a690e5a71db0a227d7c8c264b8003 Observed Jul 21, 2026Triage
c6694c1a76fa191ff75af8a391961ef51c023cdb672173836bb579a6db36526e Observed Jul 21, 2026Triage
e7b40a4ed57a20e88c75056895e901010c3e77ba38ccb6687e5b3edb0530a868 Observed Jul 21, 2026Triage
2fcad226b17131da4274e1b9f8f31359bdd325c9568665f08fd1f6c5d06a23ce Observed Jul 20, 2026Triage
734833c3803748a10303a23031dd1c53edac0badca875b28e61a4e9b219ff8f0 Observed Jul 20, 2026Triage
77fb832052abc29f8392e50a83571fda0a9a44fc14c485bc9ae58b37ca51b00e Observed Jul 20, 2026Triage
928495bc2d7b8cecf40999928f176f94e0b4d1978bf7b56c8a8e6d4c7783bd7f Observed Jul 20, 2026Triage
a0e4fab7b274ddfc668cc92c463da6033eeaa136abe37ac1e67922f8e9568297 Observed Jul 20, 2026Triage
MITRE ATT&CK
NonEuclid RAT in ATT&CK
3 distinct techniquesTechniques
3 techniquesReporting
