MB-79285c6103ceb48720fda612a0d519306cc4bc47838b07ce27c86c2bcfe56749 |
VShell: 1e18f1cefd29ba176b177960ecbfe8c6.exe |
high |
VShell |
1 |
10 |
|
|
|
MB-441001f00c258a69d19accf005444e25f03a5923cda288d70d0e3b0779aa9de2 |
Mirai: sh4 |
high |
Mirai |
1 |
0 |
|
|
|
URLhaus-PL-441001f00c258a69d19accf005444e25f03a5923cda288d70d0e3b0779aa9de2 |
URLhaus payload: (elf) 441001f00c258a69… |
medium |
malware |
2 |
0 |
|
|
|
TF-2020340 |
VShell: ip:port combination that is used for botnet Command&control (C&C) 149.30.247.60:8083 |
high |
VShell |
2 |
0 |
|
|
|
MB-08dbe3ce2bb34e0f4f7db395b44cf45b7b0c22f5558d64bac8c862783aaad25a |
VShell: 1c8494b2943415f30eea9893224c7ff9.exe |
high |
VShell |
1 |
10 |
|
|
|
URLhaus-PL-6efdf3084de0d5c2ef73fa81cad83d6f51d0ca323a9f8e2b4d3835cb70882876 |
URLhaus payload: (unknown) 6efdf3084de0d5c2… |
medium |
malware |
2 |
0 |
|
|
|
TF-2020339 |
ClearFake: Domain name that delivers a malware payload fcdnbovres.cc |
high |
ClearFake |
2 |
10 |
|
|
|
MB-f3861635d119b688e8fd1f6c807bc1abd1d2ab4e49980c201eb5455db37fbe96 |
Unknown: server.exe |
high |
Unknown |
1 |
0 |
|
|
|
TF-2020338 |
Vidar: Domain that is used for botnet Command&control (C&C) amanplya.org |
high |
Vidar |
2 |
10 |
|
|
|
TF-2020336 |
Vidar: Domain that is used for botnet Command&control (C&C) t.dak69.org |
high |
Vidar |
2 |
0 |
|
|
|
TF-2020337 |
Vidar: Domain that is used for botnet Command&control (C&C) kku.amanplya.org |
high |
Vidar |
2 |
0 |
|
|
|
TF-2020335 |
AsyncRAT: ip:port combination that is used for botnet Command&control (C&C) 104.249.10.148:8888 |
high |
AsyncRAT |
2 |
0 |
|
|
|
TF-2020333 |
Cobalt Strike: ip:port combination that is used for botnet Command&control (C&C) 35.212.135.58:80 |
high |
Cobalt Strike |
2 |
0 |
|
|
|
TF-2020334 |
Cobalt Strike: ip:port combination that is used for botnet Command&control (C&C) 35.212.135.58:8080 |
high |
Cobalt Strike |
2 |
0 |
|
|
|
TF-2020331 |
Cobalt Strike: ip:port combination that is used for botnet Command&control (C&C) 35.212.135.58:22 |
high |
Cobalt Strike |
2 |
0 |
|
|
|
TF-2020332 |
Cobalt Strike: ip:port combination that is used for botnet Command&control (C&C) 35.212.135.58:443 |
high |
Cobalt Strike |
2 |
0 |
|
|
|
URLhaus-PL-0ca8c5bf81966e686f83fe00d2f66a26f159eb1235e0256d4b0dbc8c48bd5d7e |
URLhaus payload: (html) 0ca8c5bf81966e68… |
medium |
malware |
2 |
0 |
|
|
|
TF-2020330 |
Unknown Loader: SHA256 hash of a malware sample (payload) b9ccb3f0b7de8d35d7de8b6d6e3a1040b7faa088b7c002c69f063ee871bfb77f |
high |
Unknown Loader |
2 |
0 |
|
|
|
TF-2020329 |
Unknown Loader: SHA256 hash of a malware sample (payload) c7f7208ec7dc96270f9d6f2c2005a70c31de9424f76f399a5ebe6139206bce30 |
high |
Unknown Loader |
2 |
0 |
|
|
|
TF-2020328 |
Unknown Loader: SHA256 hash of a malware sample (payload) 80c4995fe223a8d7d8e564312477173eccf913d05a9469abfcc6f7fb4abb5d87 |
high |
Unknown Loader |
2 |
0 |
|
|
|
TF-2020327 |
Coinminer: SHA256 hash of a malware sample (payload) 29aacb2efe28d3a4354a3d52a12ecc1ae77146f32abbbd3f718c574ed306bfaa |
high |
Coinminer |
2 |
0 |
|
|
|
TF-2020326 |
WARDENStealer: SHA256 hash of a malware sample (payload) 02b09e545708386533e7cc40073bd3b0d3ca36742b0df06e67a9ad64e6069f1e |
high |
WARDENStealer |
2 |
0 |
|
|
|
URLhaus-PL-ee10ddd57d4a122f48ed7755fa90ad40b9286e592fafbdb319d315efda612667 |
URLhaus payload: (unknown) ee10ddd57d4a122f… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-6c30da7df12b1921fdd8ef006e8373507d8725a44935025421354740856c057c |
URLhaus payload: (unknown) 6c30da7df12b1921… |
medium |
malware |
2 |
0 |
|
|
|
MB-5cfab00d6b9a85bea79b4091293699519e6efbc0dd35410b04d5838d2feb4230 |
Unknown: p.hta |
high |
Unknown |
1 |
0 |
|
|
|
MB-c44fa50137a135f93e56758027409f38c4142e69317915dd178574306935273c |
Unknown: agent.bin.armv7 |
high |
Unknown |
1 |
0 |
|
|
|
MB-291acc9bcb098cb3f87e141c693abf99480f2de855119e15575b0739d892a88f |
Unknown: agent.bin.alpine |
high |
Unknown |
1 |
0 |
|
|
|
MB-aee563de1f5717284ec3fc3dfa17beb00f90f95d1eccb42727c9f842ec21d4f0 |
Unknown: agent.bin.arm64 |
high |
Unknown |
1 |
0 |
|
|
|
MB-e90c74c7af54082bb98e39a484d63ee7df255e63a8ef7b73f75069059f8672b7 |
Mirai: zm-v05 |
high |
Mirai |
1 |
0 |
|
|
|
MB-e3e8605e78993ab6fc3cec5ec419ba0c00a0bd297e5eba92a2b335667e5bb54e |
EchoBot: linux-arm7 |
high |
EchoBot |
1 |
0 |
|
|
|
MB-1fbdbff4f0bca012f2a5582cb81ee823c6b1bc8c4c8fa0b1768fed3eece13478 |
Mirai: na |
high |
Mirai |
1 |
0 |
|
|
|
MB-36b650e50841591ccf295f99cbdc6e61fca14226a14eb4e2510da30a9d6ff162 |
EchoBot: linux-x86 |
high |
EchoBot |
1 |
0 |
|
|
|
MB-e77b2c6872dda6b1588160c640ee7906231d2acfe70a8dd5676f5ccff3825898 |
EchoBot: linux-x86_64 |
high |
EchoBot |
1 |
0 |
|
|
|
MB-28cd43f5dd1aaf575f067fa9eac5d999ddc26b35c5809d427a6cc137e4713555 |
EchoBot: linux-aarch64 |
high |
EchoBot |
1 |
0 |
|
|
|
MB-a0ddfe358cad4c8083714756fc154141e1ec12015b59c512d232f82437a695c5 |
EchoBot: android-aarch64 |
high |
EchoBot |
1 |
0 |
|
|
|
MB-6ba20b92d770c357a4500e94cafe3213ab81564fe5b2329367ec1fb957b72c39 |
EchoBot: android-arm7 |
high |
EchoBot |
1 |
0 |
|
|
|
MB-e4d71943c7838864566a436aca5d0cde9467dfb8073b22b647db52b8ccb6a034 |
EchoBot: android-x86 |
high |
EchoBot |
1 |
0 |
|
|
|
MB-3c99bb2dc75c193c24c6fa8d0af5f9d0bc506c7ed157ee8dd2ad1063da2d68ec |
EchoBot: android-x86_64 |
high |
EchoBot |
1 |
0 |
|
|
|
TF-2020325 |
Grandoreiro: ip:port combination that is used for botnet Command&control (C&C) 52.87.171.175:3243 |
high |
Grandoreiro |
3 |
0 |
|
|
|
TF-2020324 |
Grandoreiro: Domain that is used for botnet Command&control (C&C) billy.collegefan.org |
high |
Grandoreiro |
3 |
0 |
|
|
|
URLhaus-PL-3d2af4cda186c99dcafc65dc25c40fc1613fb84d8bced266a851bcae26543b94 |
URLhaus payload: (unknown) 3d2af4cda186c99d… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-291acc9bcb098cb3f87e141c693abf99480f2de855119e15575b0739d892a88f |
URLhaus payload: (elf) 291acc9bcb098cb3… |
medium |
malware |
2 |
0 |
|
|
|
TF-2019975 |
Unknown Stealer: URL that is used for botnet Command&control (C&C) https://discord.com/api/webhooks/1548809420358549526/iDDGbQRMab24avMSNZ14Y1xGr-d… |
high |
Unknown Stealer |
3 |
0 |
|
|
|
TF-2020030 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) 3131.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2020031 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) 3169.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2019973 |
Unknown Stealer: Domain that is used for botnet Command&control (C&C) ewababa.sbs |
high |
Unknown Stealer |
3 |
0 |
|
|
|
TF-2020032 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) 7dak.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2020033 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) acilicak.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2020034 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) ahmetaga.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2020035 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) dumbaero.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|