Alert: XorBot Comes Back with Enhanced Tactics - NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.
Tags
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Social Media - T1593.001 Software - T1592.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID 478ac123-573c-4340-8e22-9413ce875ae4
Fingerprint b7944285a8d1f689
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 21, 2024, 3 a.m.
Added to db Nov. 21, 2024, 7:16 a.m.
Last updated Dec. 3, 2024, 7:29 a.m.
Headline Alert: XorBot Comes Back with Enhanced Tactics
Title Alert: XorBot Comes Back with Enhanced Tactics - NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.
Detected Hints/Tags/Attributes 47/1/9
Source URLs
Redirection Url
Details Source https://nsfocusglobal.com/alert-xorbot-comes-back-with-enhanced-tactics/
URL Provider
Details Provider Source level domain
Details nsfocusglobal.com nsfocusglobal.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 184 ✔ NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks. https://nsfocusglobal.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 80 
cve-2014-8361
Details CVE 79 
cve-2017-17215
Details CVE 43 
cve-2023-1389
Details Domain 1 
ld-unix.so
Details Domain 33 
conn.masjesu.zip
Details File 33 
masjesu.zip
Details md5 2 
12f0e9582f0a65984653f75466709743
Details sha256 3 
8bc5e3bff5150738699927ca2b95f3e3bfd87aed44c30fc61fac788248528579
Details IPv4 22 
216.126.231.240