0xc117688c530b660e15085bF3A2B664117d8672aA

Ethereum Address

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

April 15, 2026

Last Seen

April 15, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Hardcoded wallet address used in the malware.

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Blockchain · 2

Web search · 2

Related Clusters (1)

PHANTOMPULSE Malware Campaign Exploits Obsidian for Targeted Attacks

Apr 14·9 sources

Related Articles (1)

Phantom In The Vault

www.elastic.co·Apr 15

Related Entities

Malware Phishing Ref6598 0x38796B8479fDAE0A72e5E7e326c87a637D0Cbc0E Financial Phantompull Phantompulse T1055 - Process Injection T1059.001 - PowerShell T1071 - Application Layer Protocol T1574 - Hijack Execution Flow MacOS