#StagedC2 config observed at Tue May 5 18:23:12 2026 UTC, located at hXXps://pastebin[.]com/raw/m7WPiHqC C2: Zakhar-Borodavka-39676[.]portmap[.]host:39676 (IP: 193.161.193.99)

#StagedC2 config observed at Tue May 5 16:56:05 2026 UTC, located at hXXps://pastebin[.]com/raw/MdhUVXYr C2: x9ehqtlpc8[.]localto[.]net:2206 (IP: 129.151.142.36)

#StagedC2 config observed at Tue May 5 13:27:06 2026 UTC, located at hXXps://pastebin[.]com/raw/azbwGSWH C2: zmbrk-48484[.]portmap[.]host:48484 (IP: 193.161.193.99)

#StagedC2 config observed at Tue May 5 12:02:14 2026 UTC, located at hXXps://pastebin[.]com/raw/csupM5rw C2: x9ehqtlpc8[.]localto[.]net:7013 (IP: 129.151.142.36)

#StagedC2 config observed at Tue May 5 10:45:16 2026 UTC, located at hXXps://pastebin[.]com/raw/BFMNjNqM C2: 161[.]35[.]110[.]36:42747

#StagedC2 config observed at Tue May 5 10:49:08 2026 UTC, located at hXXps://pastebin[.]com/raw/CU7UzZgW C2: klgfl-41424[.]portmap[.]host:41424 (IP: 193.161.193.99)

#StagedC2 config observed at Tue May 5 05:41:16 2026 UTC, located at hXXps://pastebin[.]com/raw/sWbXuPjp C2: jahf7286ld[.]localto[.]net:5728 (IP: 94.156.250.190)

#StagedC2 config observed at Tue May 5 05:13:08 2026 UTC, located at hXXps://pastebin[.]com/raw/2dXN1wV5 C2: ccjrkbzenu[.]localto[.]net:4234 (IP: 89.163.135.20)

#StagedC2 config observed at Mon May 4 19:00:09 2026 UTC, located at hXXps://pastebin[.]com/raw/CNZ5zFvC C2: ase749-59106[.]portmap[.]host:59106 (IP: 193.161.193.99)

#StagedC2 config observed at Mon May 4 17:38:06 2026 UTC, located at hXXps://pastebin[.]com/raw/gnTZ7NrK C2: 0[.]tcp[.]eu[.]ngrok[.]io:12345 (IP: 3.74.27.83)