0xB6bC9e1D0b2fB96Ab7C47E04Cb0BE477410bC1f2

Ethereum Address

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

July 15, 2026

Last Seen

November 9, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Smart contract address used to retrieve C2 domain for malware

Checked against every article that reports it before entering the IOC feed.

Pivot to external tools

Opens in new tab · no data sent to TC

Blockchain · 2

Web search · 2

Related Articles (2)

Sekoia — Exvicy: A Copycat of the ErrTraffic Malware Distribution Framework

www.sekoia.com·5d ago

EtherHiding to ClickFix Analysis

www.derp.ca·Jul 15

Related Entities

Malware Trojan Polygon 0xCaf2C54E400437da717cF215181B170F65187aBf Exvicy T1059.001 - PowerShell T1021.004 - SSH T1021 - Remote Services T1041 - Exfiltration Over C2 Channel T1053 - Scheduled Task/Job T1055 - Process Injection T1056 - Input Capture