RST Threat feed. IOC:

ID RST:12749C37-800D-3186-A806-DFFA985C8636
Type rst
Reporter RST Threat Feed
Modified 2021-02-16T00:00:00


Found focuslex[.]com in RST Threat Feed with score 48. First seen: 2021-02-16T03:00:00, Last seen: 2021-03-03T03:00:00. IOC tags: c2. It was found that the IOC is used by: cobalt_strike. Domain has DNS A records: 108[.]62.141.5 Whois: Created: 2021-02-07 10:58:09, Registrar: unknown, Registrant: NAMECHEAP INC.