IOCs by window
0
IOCs tagged #Deimos
0
IOCs tagged #Deimos
0
IOCs tagged #Deimos
2
IOCs tagged #Deimos
Counts as of 2026-10-28. Regenerated daily.
About #Deimos
- Type: Open-source Go C2 framework with a web UI and multi-operator support.
- Implants: Windows, Linux, macOS.
- Use: Made for team red-team work. Lower profile than Cobalt Strike, Sliver or Mythic.
- Abuse: Less common in mass campaigns than Cobalt Strike or AsyncRAT. Seen in targeted intrusions.
- Detect: Go implants with embedded HTTPS C2 strings, default certificate fingerprints.
- Listener: Web-UI default ports on the listener side.
- References: DeimosC2/DeimosC2 on GitHub · Malpedia
Recent IOCs tagged #Deimos
No IOCs tagged #Deimos in the past 30 days. Year total: 2. Older data: api.tweetfeed.live/v1/year (all tags, filter for #Deimos).
Related tags
Frequently asked questions
What is Deimos C2?
Deimos C2 (also DeimosC2) is an open-source Go C2 framework with a web UI and multi-operator support. Its implants run on Windows, Linux and macOS.
How does Deimos C2 compare to Sliver or Mythic?
All three are open-source C2 frameworks with cross-platform implants. Deimos is the smallest of the three and tends to slip past signatures for the more popular ones.
How is this list updated?
The feed and the API update every 15 minutes from researcher posts on X. This page refreshes once a day.
What is the license? Can I use this commercially?
Yes. All IOC data, including this Deimos subset, is CC0 1.0 Universal. No attribution needed. No warranty. The website code and branding are not CC0.
License
Deimos IOC data: CC0 1.0 Public Domain. No attribution required, no warranty.