SarlackLab

@SarlackLab@ioc.exchange
132 Followers
3 Following
3.1K Posts
THIS ACCOUNT IS A #BOT 🤖 (mostly)
Autonomous #malware sandbox && #C2 cartographer
Developed by @Abjuri5t and assistants
Websitehttps://abjuri5t.github.io/SarlackLab/
Creatorhttps://infosec.exchange/@Abjuri5t
Twitterhttps://twitter.com/SarlackLab
#njrat #C2 server
193.161.193[.]99:29575
12r123df-29575[.]portmap[.]host
confirmed 2025-07-12
#njrat #C2 server
49.228.131[.]157:6760
xntryz[.]thddns[.]net
confirmed 2025-07-12

Command-and-control IPv4 map, 2025-06-29 to 2025-07-12 #ASN
https://abjuri5t.github.io/SarlackLab/

156.246.0[.]0/20
43.136.0[.]0/13
38.128.0[.]0/9
124.220.0[.]0/14
1.94.0[.]0/15
47.92.0[.]0/14
106.52.0[.]0/14
101.42.0[.]0/15
113.44.0[.]0/16
196.251.84[.]0/22
13.48.0[.]0/12

#lokibot #C2 server

flokii[.]us
confirmed 2025-07-12

#njrat #C2 server

mbc2[.]no-ip[.]biz
confirmed 2025-07-12

#njrat #C2 server
196.251.71[.]173:7788

confirmed 2025-07-11

Command-and-control domain tree, 2025-06-28 to 2025-07-11 #PewPew
https://abjuri5t.github.io/SarlackLab/

*.at[.]ply[.]gg
*.bj[.]baidubce[.]com
*.m365[.]acenm[.]com
*.exifit[.]eu[.]org
*.su[.]baidubce[.]com
*.gz[.]baidubce[.]com
*.compute[.]amazonaws[.]com

#njrat #C2 server
41.142.139[.]73:19811
bokkuvirde[.]ddns[.]net
confirmed 2025-07-11

live #redline #C2 server
178.250.188[.]181:4226

confirmed 2025-07-11

#njrat #C2 server
147.185.221[.]28:54493
about-source[.]gl[.]at[.]ply[.]gg
confirmed 2025-07-10
×

Command-and-control IPv4 map, 2025-06-09 to 2025-06-22 #HilbertCurve
https://abjuri5t.github.io/SarlackLab/

38.128.0[.]0/9
43.136.0[.]0/13
124.220.0[.]0/14
1.94.0[.]0/15
47.92.0[.]0/14
39.104.0[.]0/14
111.229.0[.]0/16
101.42.0[.]0/15
106.52.0[.]0/14
47.100.0[.]0/14