TF-2020036 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) gelmedi.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2020037 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) helelele.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2020038 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) kabab.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2020039 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) keke.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2020040 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) kiyamet.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2020041 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) lastabuse.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2020042 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) wuhhuu.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2020043 |
Unknown RAT: Domain that is used for botnet Command&control (C&C) zbabuvj.lol |
high |
Unknown RAT |
3 |
0 |
|
|
|
TF-2020323 |
Grandoreiro: Domain name that delivers a malware payload vmi3721545.contaboserver.net |
high |
Grandoreiro |
3 |
0 |
|
|
|
TF-2020322 |
Grandoreiro: URL that delivers a malware payload https://vmi3721545.contaboserver.net/NXuKVxCZmBHaNOP04V.php |
high |
Grandoreiro |
3 |
0 |
|
|
|
MB-bf519129c526aa9cd1316f219dfbec5e0da362e1448c24d245459ed5fc93ff70 |
Grandoreiro: mgdu-20240327_392366-Act753595CopSSO4H2417748376-VigTHXZ-49072.vbs |
high |
Grandoreiro |
1 |
0 |
|
|
|
TF-2020303 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) brackendellham.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020304 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) brindlecoveton.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020305 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) cloverholtway.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020306 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) coppervaleley.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020307 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) dapplefenland.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020308 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) duskfoldton.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020309 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) fernwoldway.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020310 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) glintmereley.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020311 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) grayfellby.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020312 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) hartbrookley.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020313 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) hollowickber.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020314 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) lintmoorley.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020315 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) mirthvaleway.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020316 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) payneofin.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020317 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) quillmoorston.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020318 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) sablehurstby.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020319 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) sablewoodton.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020320 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) tawnyfoldton.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020321 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) willowfenham.cc |
high |
ACR Stealer |
2 |
0 |
|
|
|
TF-2020302 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) mothglenber.cc |
high |
ACR Stealer |
3 |
0 |
|
|
|
TF-2020301 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) llm.mothglenber.cc |
high |
ACR Stealer |
3 |
0 |
|
|
|
TF-2020300 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) mireglenland.cc |
high |
ACR Stealer |
3 |
0 |
|
|
|
TF-2020299 |
ACR Stealer: Domain that is used for botnet Command&control (C&C) nosql.mireglenland.cc |
high |
ACR Stealer |
3 |
0 |
|
|
|
TF-2020298 |
WARDENStealer: Domain that is used for botnet Command&control (C&C) prokla0411.com |
high |
WARDENStealer |
3 |
0 |
|
|
|
MB-638de95d39b0b9d8fb31f52b0077e2c55b285a33c5e08e6805916c9411a797e6 |
Mirai: x86_64 |
high |
Mirai |
1 |
0 |
|
|
|
TF-2020297 |
php.shin_webshell: Domain name that delivers a malware payload lohyry.workers.dev |
medium |
php.shin_webshell |
2 |
0 |
|
|
|
MB-82fd7593dd05b1b8a59b0f2092b714373086c5892b7add4988aa086110fa5dff |
Mirai: na |
high |
Mirai |
1 |
0 |
|
|
|
TF-2019857 |
MopsStealer: ip:port combination that is used for botnet Command&control (C&C) 192.162.199.167:406 |
high |
MopsStealer |
3 |
0 |
|
|
|
TF-2019947 |
SmartLoader: ip:port combination that is used for botnet Command&control (C&C) 94.156.154.12:80 |
high |
SmartLoader |
3 |
0 |
|
|
|
TF-2019956 |
WARDENStealer: URL that delivers a malware payload https://raw.githubusercontent.com/ARTMIN3555/Helldivers2-EnhancedModToolkit/main… |
high |
WARDENStealer |
3 |
0 |
|
|
|
TF-2019957 |
WARDENStealer: URL that delivers a malware payload https://raw.githubusercontent.com/AttriKartik123/AceServe-Trainer-TennisManager2… |
high |
WARDENStealer |
3 |
0 |
|
|
|
TF-2019958 |
WARDENStealer: URL that delivers a malware payload https://raw.githubusercontent.com/BrunoCroppi/TLOU2-UndergroundToolkit/main/L%D0… |
high |
WARDENStealer |
3 |
0 |
|
|
|
TF-2019959 |
WARDENStealer: URL that delivers a malware payload https://raw.githubusercontent.com/DhananjayaKD/MyCuteRoomie-FreeDL-Hub/main/L%D0… |
high |
WARDENStealer |
3 |
0 |
|
|
|
TF-2019960 |
WARDENStealer: URL that delivers a malware payload https://raw.githubusercontent.com/EarthwebAP/PotatoHack-MC-Toolkit/main/L%D0%BEa… |
high |
WARDENStealer |
3 |
0 |
|
|
|
TF-2019961 |
WARDENStealer: URL that delivers a malware payload https://raw.githubusercontent.com/Th4nhDT716/GalugaLegendsFreeLaunch/main/L%D0%B… |
high |
WARDENStealer |
3 |
0 |
|
|
|
TF-2019962 |
WARDENStealer: URL that delivers a malware payload https://raw.githubusercontent.com/caconformif9/Monte-Carlo-Localization/main/L%D… |
high |
WARDENStealer |
3 |
0 |
|
|
|
TF-2019963 |
WARDENStealer: URL that delivers a malware payload https://raw.githubusercontent.com/gazza2577/PocketBraveryFreeHub/main/L%D0%BEade… |
high |
WARDENStealer |
3 |
0 |
|
|
|
TF-2019964 |
WARDENStealer: URL that delivers a malware payload https://raw.githubusercontent.com/jillkpatel/CustomMaid3D2-UnchainedEdition/main… |
high |
WARDENStealer |
3 |
0 |
|
|
|
TF-2019965 |
WARDENStealer: URL that delivers a malware payload https://raw.githubusercontent.com/killmenow001/TankHead-FreebieHub/main/L%D0%BEa… |
high |
WARDENStealer |
3 |
0 |
|
|
|