Skip to content
Malware family

Redosdru

Profile source: Mallory opens in a new tab

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Jul 15, 2026
Last activity
Jul 21, 2026
Feed role
C2 / Distribution
Host form
34 IP / 4 hostnames

Leading locations

  • DE10
  • HK8
  • US7
  • LU5
  • NL3
  • GB2
  • CN1
  • ES1
  • TR1

Leading providers

  • Ghosty Networks LLC5
  • CTG Server Limited4
  • FEMO IT SOLUTIONS LIMITED4
  • Cloudflare, Inc.3
  • DigitalOcean, LLC3
  • HostPapa3

Infrastructure traits

  • Hosting 38
  • Anycast 3
  • Vpn 2
  • Proxy 1

Samples

Recent associated samples

MITRE ATT&CK

Redosdru in ATT&CK

1 distinct techniques

Reporting

Research mentioning Redosdru

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.