TF-2020355 |
Unknown malware: URL that delivers a malware payload https://maplezenith.live/ |
high |
Unknown malware |
3 |
0 |
|
|
|
TF-2020354 |
ClearFake: Domain name that delivers a malware payload mobiler-videoturm.ch |
high |
ClearFake |
2 |
0 |
|
|
|
URLhaus-PL-d1e228e964b9a8de741df4eefe384a70fa926c8cc71bd1e48b5c2b41ad98ac99 |
URLhaus payload: (zip) d1e228e964b9a8de… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-eb73eaa3fd0a07060f675e32d4e89455aeccbf6b608783d4f9adac1585170df8 |
URLhaus payload: (html) eb73eaa3fd0a0706… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-5a75b0c38aec8f46ab538038eda0ff0062b98aad5342a4328211361e9e530fe0 |
URLhaus payload: (html) 5a75b0c38aec8f46… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-776b134d01ca6e5f6f5485cf110f1a2dfecfdd4803a508ca65410c134c978b12 |
URLhaus payload: (html) 776b134d01ca6e5f… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-2519a3f1407fda717b266306e6ef63751a982ab1845104a5f548da6e3200c270 |
URLhaus payload: (html) 2519a3f1407fda71… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-b7f8d59c1af4109b41f4af4a5c5ed2268b3c0b5cc243f5dd07b203111b8c356b |
URLhaus payload: (zip) b7f8d59c1af4109b… |
medium |
malware |
2 |
0 |
|
|
|
MB-7a53aa04f5b824ace425f548c4f97362e3e93fbfbd34e85c8029b868a150eaab |
Mirai: arm |
high |
Mirai |
1 |
0 |
|
|
|
URLhaus-PL-7a53aa04f5b824ace425f548c4f97362e3e93fbfbd34e85c8029b868a150eaab |
URLhaus payload: (elf) 7a53aa04f5b824ac… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-c2a08560ff1a9f3b371d612ab90225de16e0465ae4e7f78f027ccc3a4fb20fc3 |
URLhaus payload: (html) c2a08560ff1a9f3b… |
medium |
malware |
2 |
0 |
|
|
|
MB-5f5aba8e2fae0ba27310056e191c7f8c9ad993d3811635ee74095e348010fa40 |
Unknown: arm7 |
high |
Unknown |
1 |
0 |
|
|
|
URLhaus-PL-ee353b339fbaea4e03e11c95dcc2dd9f2b09534c81922b0ea9e8999da8ec6118 |
URLhaus payload: (unknown) ee353b339fbaea4e… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-5f5aba8e2fae0ba27310056e191c7f8c9ad993d3811635ee74095e348010fa40 |
URLhaus payload: (elf) 5f5aba8e2fae0ba2… |
medium |
malware |
2 |
0 |
|
|
|
TF-2020353 |
Vidar: Domain that is used for botnet Command&control (C&C) yf.amanplya.org |
high |
Vidar |
2 |
0 |
|
|
|
URLhaus-PL-4236a047946cb67d6a7e839ec4fee7092e36705e2ebb69f80a5614aa3adf8eee |
URLhaus payload: (js) 4236a047946cb67d… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-0c457a646184f7e933a61ccb49ceb4ab7250d7d5a95fd312bd3d7baa7d993c45 |
URLhaus payload: (unknown) 0c457a646184f7e9… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-2290afd672e93f28b0f8feceb51e91668858fafb85cd47b397d41e1c2bb23edb |
URLhaus payload: (zip) 2290afd672e93f28… |
medium |
malware |
2 |
0 |
|
|
|
TF-2020352 |
Unknown Loader: SHA256 hash of a malware sample (payload) 38d9ca4f66cbff9e4af7bdde9c43ced323cf3498b2e728e52fb9eb1508e2fa32 |
high |
Unknown Loader |
2 |
0 |
|
|
|
TF-2020351 |
Unknown Loader: SHA256 hash of a malware sample (payload) ef7cdf4246b43dd4cfcfcfd904f75bc25133064761309439bebd5607d96c04a0 |
high |
Unknown Loader |
2 |
0 |
|
|
|
TF-2020350 |
Unknown Loader: SHA256 hash of a malware sample (payload) c54c960b487ecababb42d7e91787ad0b5c41d8c1c0d762ac18e4155f1efb1d2b |
high |
Unknown Loader |
2 |
0 |
|
|
|
TF-2020349 |
Unknown Loader: SHA256 hash of a malware sample (payload) 2b0ad3caef7e974a1766b135433bfaeceb5ee4266dc410e5bd7dfb4ddc184622 |
high |
Unknown Loader |
2 |
0 |
|
|
|
TF-2020348 |
Mirai: SHA256 hash of a malware sample (payload) 441001f00c258a69d19accf005444e25f03a5923cda288d70d0e3b0779aa9de2 |
high |
Mirai |
2 |
0 |
|
|
|
TF-2020347 |
Mirai: SHA256 hash of a malware sample (payload) 374ff525369f14814209e0520b307da8683b1d04eac7ebf7649fd7cebd6e40d6 |
high |
Mirai |
2 |
0 |
|
|
|
TF-2020346 |
ClearFake: Domain name that delivers a malware payload www.waterskiwa.com.au |
high |
ClearFake |
2 |
0 |
|
|
|
MB-8f1920aa856881c43a2c059b814d3f2173740b181ab678cdea3a1f79d19afa3d |
njrat: 5346F046CD8B647D51C1C19B8916CD2D.exe |
high |
njrat |
1 |
0 |
|
|
|
URLhaus-PL-3665a1bfaa541bcb6f19bd7949331d2192e3df62fcba4c375d5d65a3150d5b04 |
URLhaus payload: (html) 3665a1bfaa541bcb… |
medium |
malware |
2 |
0 |
|
|
|
TF-2020345 |
ClearFake: Domain name that delivers a malware payload ssyxl35z.fadiatalahoud.com |
high |
ClearFake |
2 |
0 |
|
|
|
URLhaus-PL-f0a5fc3c0cfab7be0cc1c43db1ad8b8629e6b3349c567c418de8ec739f3fec9c |
URLhaus payload: (html) f0a5fc3c0cfab7be… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-754d40bcd86f651dbaed0701869b8e1d7fbcdfc325e009d8d6c5ff72aff8a569 |
URLhaus payload: (zip) 754d40bcd86f651d… |
medium |
malware |
2 |
0 |
|
|
|
URLhaus-PL-af38ec4b39581f7cfbf32460ff0850b9e2697480be1682d88b063e1c8e66be7e |
URLhaus payload: (html) af38ec4b39581f7c… |
medium |
malware |
2 |
0 |
|
|
|
TF-2020344 |
php.shin_webshell: Domain name that delivers a malware payload laxadi.workers.dev |
medium |
php.shin_webshell |
2 |
0 |
|
|
|
URLhaus-PL-c233e378f344214fffdb179302b29cf18b21d7063121097aae6d2a5fb014f9cb |
URLhaus payload: (zip) c233e378f344214f… |
medium |
malware |
2 |
0 |
|
|
|
TF-2020342 |
Remcos: ip:port combination that is used for botnet Command&control (C&C) 203.202.232.26:14642 |
high |
Remcos |
3 |
0 |
|
|
|
TF-2020343 |
Remcos: ip:port combination that is used for botnet Command&control (C&C) 203.202.232.26:14643 |
high |
Remcos |
3 |
0 |
|
|
|
MB-ed91e797ca9c4e4eebab32a142579df03627aeec35539daf43bbc17f7943ae89 |
RemcosRAT: 3AC9FE62B05AA373958650EDE3FC4843.exe |
high |
RemcosRAT |
1 |
0 |
|
|
|
TF-2020341 |
Remcos: ip:port combination that is used for botnet Command&control (C&C) 203.202.232.26:14641 |
high |
Remcos |
2 |
0 |
|
|
|
URLhaus-PL-6776af4da8829fdea9efef86989ed71672c1c48fa5a0473de4f7549792baf200 |
URLhaus payload: (zip) 6776af4da8829fde… |
medium |
malware |
2 |
0 |
|
|
|
MB-edac18eb441696bcd1f5a42a9313f5ba5896f44ba8cdd43037bd86beae4c6cef |
Unknown: bot.x86_64 |
high |
Unknown |
1 |
0 |
|
|
|
MB-ff0edeab4ab7d9d2db92750c7e76ec2eac8ecb89c300e9d922266fbe7fc97bcc |
VShell: 1e1739ca1154feeacf63af19875ec531.exe |
high |
VShell |
1 |
0 |
|
|
|
MB-79285c6103ceb48720fda612a0d519306cc4bc47838b07ce27c86c2bcfe56749 |
VShell: 1e18f1cefd29ba176b177960ecbfe8c6.exe |
high |
VShell |
1 |
0 |
|
|
|
MB-441001f00c258a69d19accf005444e25f03a5923cda288d70d0e3b0779aa9de2 |
Mirai: sh4 |
high |
Mirai |
1 |
0 |
|
|
|
URLhaus-PL-441001f00c258a69d19accf005444e25f03a5923cda288d70d0e3b0779aa9de2 |
URLhaus payload: (elf) 441001f00c258a69… |
medium |
malware |
2 |
0 |
|
|
|
TF-2020340 |
VShell: ip:port combination that is used for botnet Command&control (C&C) 149.30.247.60:8083 |
high |
VShell |
2 |
0 |
|
|
|
MB-08dbe3ce2bb34e0f4f7db395b44cf45b7b0c22f5558d64bac8c862783aaad25a |
VShell: 1c8494b2943415f30eea9893224c7ff9.exe |
high |
VShell |
1 |
0 |
|
|
|
URLhaus-PL-6efdf3084de0d5c2ef73fa81cad83d6f51d0ca323a9f8e2b4d3835cb70882876 |
URLhaus payload: (unknown) 6efdf3084de0d5c2… |
medium |
malware |
2 |
0 |
|
|
|
TF-2020339 |
ClearFake: Domain name that delivers a malware payload fcdnbovres.cc |
high |
ClearFake |
2 |
0 |
|
|
|
MB-f3861635d119b688e8fd1f6c807bc1abd1d2ab4e49980c201eb5455db37fbe96 |
Unknown: server.exe |
high |
Unknown |
1 |
0 |
|
|
|
TF-2020336 |
Vidar: Domain that is used for botnet Command&control (C&C) t.dak69.org |
high |
Vidar |
2 |
0 |
|
|
|
TF-2020338 |
Vidar: Domain that is used for botnet Command&control (C&C) amanplya.org |
high |
Vidar |
2 |
0 |
|
|
|