eset_ioc
- Source-provided label
- Not reported
- Evidence class
- published ioc
- Confidence
- Not reported
- Observed
- Not reported
- Retrieved
- Oct 08, 2026 06:28 UTC
DOMAIN ddns.net
Indicator published by the cited source.
Reference details
- Source category
- Malware intelligence
- Source context
king_tut/README.adoc- First reported
- Not reported
- Last reported
- Not reported
- Catalog updated
- Oct 08, 2026 06:28 UTC
- Record ID
dcf8239987ffc6b060dd2d56c2dfcfe2df271f23a433e35a8b57e024f6023dc8
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
DOMAIN
ddns[.]netSource observations
eset_ioc
- Source-provided label
- Not reported
- Evidence class
- published ioc
- Confidence
- Not reported
- Observed
- Not reported
- Retrieved
- Oct 08, 2026 05:55 UTC
eset_ioc
- Source-provided label
- Not reported
- Evidence class
- published ioc
- Confidence
- Not reported
- Observed
- Not reported
- Retrieved
- Oct 08, 2026 04:38 UTC
meta_ioc
- Source-provided label
- Not reported
- Evidence class
- published ioc
- Confidence
- Not reported
- Observed
- Not reported
- Retrieved
- Oct 08, 2026 03:35 UTC
Research references
- https://github.com/facebook/threat-research/blob/main/indicators/csv/Q1_2023/Q1_2023_%20Patchwork_APT.csv
- https://github.com/eset/malware-ioc/blob/master/casbaneiro/README.adoc
- https://github.com/eset/malware-ioc/blob/master/evilvideo/README.adoc
- https://github.com/eset/malware-ioc/blob/master/king_tut/README.adoc
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.