Last seven days
- First activity
- Aug 29, 2026
- Last activity
- Aug 29, 2026
- Feed role
- C2
- Host form
- 3 IP / 2 hostnames
C2 tracking
Seven-day C2 activity
Derp observations, rolling seven-day window
4 Aug 28
Observed infrastructure
Leading locations
- DE2
- NL1
- US1
Leading providers
- PLAY2GO INTERNATIONAL LIMITED2
- Developed Methods LLC1
- Kraken Network ISP LTD1
Infrastructure traits
- Hosting 3
- Anycast 1
Samples
Recent associated samples
179987c3f6d0f89bba9201e92d3775050e3b856778a1f3254340eb3502b6f2f3 Observed Aug 29, 2026Triage
6c34df9f930ffc84359cde93d613dd4c448cf25947959bcb4e371991a1d2d496 Observed Aug 29, 2026Triage
393701f73e155bc474629b7ace8c538e1de6a24c943f3ce38a18912d1ba3a718 Observed Aug 29, 2026Triage
3b127639b5933e1570aad16e28d7e2da7d97a8c799cb27e74c251197072690cb Observed Aug 29, 2026Triage
48420e60d0d6aa1608c726cc7d689c4f218982c6b8cda31bcc2e449a81ecaefd Observed Aug 29, 2026Triage
778488d253be44d0e8326916e94cb400d3d961cfc5b0a35b1dd56c25de7ec17e Observed Aug 29, 2026Triage
cb10b3554246ceb25a5281821b51529f18dae62a7f01e2932197d203b0b55e46 Observed Aug 29, 2026Triage
f4bbc957a310e7d4c91705d6d58065f5822f4db777254a1fa63eb5cfeb9efa6f Observed Aug 29, 2026Triage
Reported operators
Threat actors
1 named in public reportingFollowing the analysis of the Jennlog loader, SentinelLabs retrieved an additional variant of Jennlog, used to load and run OrcusRAT.
MITRE ATT&CK
