Endpoint Protection - Symantec Enterprise
Tags
country: Algeria Egypt Argentina Kuwait Iraq Morocco Saudi Arabia Libya Tunisia
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Dynamic Dns - T1311 Dynamic Dns - T1333 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Screensaver - T1546.002 Server - T1583.004 Server - T1584.004 Software - T1592.002 Remote Access Tools - T1219 Screensaver - T1180
Show in Graph
Common Information
Type Value
UUID 35b14c6b-3f1b-4218-b1ca-47c849f2c2a2
Fingerprint be943789893706e5
Analysis status DONE
Considered CTI value 0
Text language
Published March 30, 2014, 11:48 p.m.
Added to db Jan. 19, 2023, 12:15 a.m.
Last updated Oct. 1, 2024, 2:41 p.m.
Headline Endpoint Protection
Title Endpoint Protection - Symantec Enterprise
Detected Hints/Tags/Attributes 44/2/3
Source URLs
Redirection Url
Details Source http://www.symantec.com/connect/blogs/simple-njrat-fuels-nascent-middle-east-cybercrime-scene
Details Source https://www.symantec.com/connect/blogs/simple-njrat-fuels-nascent-middle-east-cybercrime-scene
URL Provider
Details Provider Source level domain
Details symantec.com www.symantec.com
Attributes
Details Type #Events CTI Value
Details Domain 4 
ge.tt
Details Domain 2 
njratmoony.no-ip.biz
Details Domain 1 
njr.no-ip.biz