TF-1932763 |
DCRat: ip:port combination that is used for botnet Command&control (C&C) 116.213.43.239:7891 |
high |
DCRat |
2 |
7 |
|
|
|
TF-1932762 |
AsyncRAT: ip:port combination that is used for botnet Command&control (C&C) 109.238.86.106:8808 |
high |
AsyncRAT |
2 |
8 |
|
|
|
TF-1932761 |
AsyncRAT: ip:port combination that is used for botnet Command&control (C&C) 109.238.86.106:7707 |
high |
AsyncRAT |
2 |
7 |
|
|
|
TF-1932760 |
AsyncRAT: ip:port combination that is used for botnet Command&control (C&C) 107.173.59.118:8580 |
high |
AsyncRAT |
2 |
8 |
|
|
|
TF-1932759 |
AsyncRAT: ip:port combination that is used for botnet Command&control (C&C) 104.243.248.63:3601 |
high |
AsyncRAT |
2 |
3 |
|
|
|
TF-1932758 |
AsyncRAT: ip:port combination that is used for botnet Command&control (C&C) 102.220.163.36:7007 |
high |
AsyncRAT |
2 |
7 |
|
|
|
TF-1932757 |
ClearFake: Domain name that delivers a malware payload hqzjyi9b.bet120x.net |
high |
ClearFake |
2 |
10 |
|
|
|
MB-cf03a302bc83b550dba8930747734363d7193429e3a4eda2fda4c0f878d4568b |
Mirai: mass.sh |
high |
Mirai |
1 |
10 |
|
|
|
MB-7213850fc3505d051b4c0ba618cc575b1f8a410f45668e2317b310315bbe4c61 |
Unknown: tadashi.mips |
high |
Unknown |
1 |
10 |
|
|
|
TF-1932756 |
ClearFake: URL that delivers a malware payload https://testingcf.jsdelivr.net/gh/dsteru3421/559f-2414-494a-8560-23ce5908/089c8e… |
high |
ClearFake |
2 |
10 |
|
|
|
TF-1932755 |
ClearFake: Domain name that delivers a malware payload atmyworst.xyz |
high |
ClearFake |
2 |
10 |
|
|
|
MB-80d5c57843523754b5fce827c12d3c922810f2175a8d6189ef944e294c76d49c |
Unknown: file |
high |
Unknown |
1 |
9 |
|
|
|
TF-1932754 |
Unknown malware: URL that delivers a malware payload https://ahrmn.com/ |
high |
Unknown malware |
3 |
10 |
|
|
|
MB-6c06e2d9918c672531dc36981ba3f0eaaaf6d93ab5846bb0035df9b0366f5443 |
Unknown: SecuriteInfo.com.W64.Agent.MYZ.gen.Eldorado.28580.7668 |
high |
Unknown |
1 |
10 |
|
|
|
MB-43efb4f01b17c9a2b9c52f926113493b0e896778e1f4d547ce20b00432d76f4c |
Unknown: 43efb4f01b17c9a2b9c52f926113493b0e896778e1f4d547ce20b00432d76f4c |
high |
Unknown |
1 |
10 |
|
|
|
MB-7d333afdb455aae365c9774f112b56a212c9386274482fd6d86edb83d8089015 |
Vidar: 7d333afdb455aae365c9774f112b56a212c9386274482fd6d86edb83d8089015.bin |
high |
Vidar |
1 |
10 |
|
|
|
MB-30fb08bb2c88795131689098c99b0cefc8aae67ad2b48dde4a07135858c55e8d |
Mirai: bot.armv6 |
high |
Mirai |
1 |
10 |
|
|
|
MB-9fa5154073d4ce91fd659d8477b26a5f85c1259f18d950e4f3a4efa6e3452d5d |
Prometei: 9fa5154073d4ce91fd659d8477b26a5f85c1259f18d950e4f3a4efa6e3452d5d |
high |
Prometei |
1 |
10 |
|
|
|
MB-07038932da9fe43629f461c5f244cf905387cab5c910a87ff97392789ff75565 |
Mirai: 07038932da9fe43629f461c5f244cf905387cab5c910a87ff97392789ff75565 |
high |
Mirai |
1 |
10 |
|
|
|
MB-d71abe40c3f0048d572b18d2ad93829be9dd89478b87868dae72e633dbd87ac0 |
WannaCry: d71abe40c3f0048d572b18d2ad93829be9dd89478b87868dae72e633dbd87ac0 |
high |
WannaCry |
1 |
10 |
|
|
|
MB-37df850b8685225f95cd3e02f8bd78a6e4628b5fc9a65c4da713fe8f8eeb571c |
Unknown: tadashi.x64 |
high |
Unknown |
1 |
10 |
|
|
|
MB-b1349a4d26a3986548d13ab590c63168f9a043689406e17b86536572aa8ea699 |
Mirai: bot.armv8 |
high |
Mirai |
1 |
10 |
|
|
|
TF-1932741 |
Aisuru: Domain that is used for botnet Command&control (C&C) kirk.velyra.ru |
high |
Aisuru |
3 |
10 |
|
|
|
TF-1932744 |
Unknown RAT: SHA256 hash of a malware sample (payload) e94a99395a2f5f33c84020f767151a2e464b1b32d7e323c949dbcee8577e4af2 |
high |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932742 |
Unknown RAT: SHA256 hash of a malware sample (payload) e16d11d02dd4ff355c4832fbdaa950d88852b47133e33a253e043ebc1f5a5dc3 |
high |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932743 |
Unknown RAT: SHA256 hash of a malware sample (payload) 086f5e17a9d3a30460f3f8ff95613ef7c5b479831ff5163015b2b7ea42cd3679 |
high |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932746 |
Unknown RAT: SHA256 hash of a malware sample (payload) db11d553f89f4ef02f725c96f7af7a3659bf17831a8e73966f1af4e92be6c594 |
high |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932745 |
Unknown RAT: SHA256 hash of a malware sample (payload) 345d1a775867b9e79ee6b0825e1e2416d715550f2162ac32c076f0371c8553e1 |
high |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932748 |
Unknown RAT: SHA256 hash of a malware sample (payload) bad0600a850436154f8d7b6f7a191dc45bd136897780cd032b336cb4b358d241 |
high |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932747 |
Unknown RAT: SHA256 hash of a malware sample (payload) 1dc438b8979a4d7125cc5cc64b80cc76b49a4b3197fb3b7b7fd6bbfe2ed25c82 |
high |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932752 |
VShell: ip:port combination that is used for botnet Command&control (C&C) 81.70.21.248:6667 |
high |
VShell |
2 |
9 |
|
|
|
TF-1932751 |
VShell: ip:port combination that is used for botnet Command&control (C&C) 39.109.126.185:12307 |
high |
VShell |
2 |
8 |
|
|
|
TF-1932750 |
Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 122.10.71.108:443 |
high |
Unknown malware |
2 |
10 |
|
|
|
TF-1932749 |
AsyncRAT: ip:port combination that is used for botnet Command&control (C&C) 23.132.164.72:8080 |
high |
AsyncRAT |
2 |
8 |
|
|
|
MB-aeec77163e05ae134a5dbf6a7f33823744c53efd338f12cf9113437d7e187d86 |
Mirai: stub.x64 |
high |
Mirai |
1 |
10 |
|
|
|
TF-1932738 |
Vidar: URL that is used for botnet Command&control (C&C) https://hj.1jp88.org/ |
high |
Vidar |
2 |
10 |
|
|
|
TF-1932740 |
Vidar: URL that is used for botnet Command&control (C&C) https://hj.234-e.com/ |
high |
Vidar |
2 |
10 |
|
|
|
TF-1932739 |
Vidar: Domain that is used for botnet Command&control (C&C) hj.234-e.com |
high |
Vidar |
2 |
10 |
|
|
|
TF-1932737 |
Vidar: Domain that is used for botnet Command&control (C&C) hj.1jp88.org |
high |
Vidar |
2 |
10 |
|
|
|
TF-1932728 |
Unknown malware: SHA256 hash of a malware sample (payload) 1921fbac7491fd43f197b13d471e7faab8fd41273115ce36ba3731b74934d01b |
high |
Unknown malware |
2 |
10 |
|
|
|
TF-1932727 |
Unknown malware: SHA256 hash of a malware sample (payload) 167c1bb2ab7f26ec474ed6862d3f84b966c7f7a45dcfcb37a0cbc629651fd0f6 |
high |
Unknown malware |
2 |
10 |
|
|
|
TF-1932732 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) dibardo.net |
medium |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932730 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) esunager.net |
medium |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932733 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) medonaz.net |
medium |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932731 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) sotikan.net |
medium |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932735 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) giperon.net |
medium |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932734 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) remuloz.net |
medium |
Unknown RAT |
2 |
10 |
|
|
|
TF-1932736 |
php.shin_webshell: Domain that is used for botnet Command&control (C&C) zejaziri.workers.dev |
medium |
php.shin_webshell |
2 |
8 |
|
|
|
MB-9d5dae158e928f5c8c49d92a462d932a7e39f7c76510ab11b666e4e2d5783ca0 |
Unknown: МОНГОЛ УЛСЫН НЭГДСЭН ТӨСВИЙН 2027 ОНЫ ТӨСВИЙН ХҮРЭЭНИЙ МЭДЭГДЭЛ, 2028-2029 ОНЫ ТӨСВИЙН ТӨСӨӨЛЛИЙН ТУХАЙ.lnk |
high |
Unknown |
1 |
10 |
|
|
|
TF-1932729 |
php.shin_webshell: Domain that is used for botnet Command&control (C&C) 5yuj1m1rfv.workers.dev |
medium |
php.shin_webshell |
2 |
10 |
|
|
|