Data by Hatching Triage

Rage Stealer

Profile source: Mallory

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

1

Sep 11

Observed infrastructure

Last seven days

First activity: Sep 11, 2026
Last activity: Sep 11, 2026
Feed role: C2
Host form: 0 IP / 1 hostnames

Leading locations

US1

Leading providers

Cloudflare, Inc.1

Infrastructure traits

Anycast 1
Hosting 1

Samples

Recent associated samples

1dc5f3577f8222ea168886dc0323bd6c9f4dec649ad7532396180e7bf24c8560

Observed Sep 11, 2026Triage

2fcad226b17131da4274e1b9f8f31359bdd325c9568665f08fd1f6c5d06a23ce

Observed Sep 11, 2026Triage

4e5cc8cb98584335400d00f0a0803c3e0202761f3fbe50bcab3858a80df255e1

Observed Sep 11, 2026Triage

8fd7d40d45c39862d5add74a10831c94988feb6c1452b56009daae88f51c69c6

Observed Sep 11, 2026Triage

e9c71b1d83e73e32a66b4b37bfedf303b6056249950e084ec3fa102f58dfedab

Observed Sep 11, 2026Triage

MITRE ATT&CK

Rage Stealer in ATT&CK

7 distinct techniques

Techniques

7 techniques

T1560 Archive Collected Data T1567 Exfiltration Over Web Service T1555 Credentials from Password Stores T1070.006 Timestomp T1562 Impair Defenses T1587.001 Malware T1005 Data from Local System

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

Hatching Triage IPinfo urlscan.io Mallory eCrime.ch ransomware.live