cShell Botnet IOCs - SEC-1275-1
Tags
| attack-pattern: | Botnet - T1583.005 Botnet - T1584.005 Ssh - T1021.004 |
Common Information
| Type | Value |
|---|---|
| UUID | 65bfe0fa-fd65-48ba-a0c5-7a5b58579741 |
| Fingerprint | 5c10fc321953e877 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 17, 2024, midnight |
| Added to db | Dec. 17, 2024, 8:41 a.m. |
| Last updated | Dec. 17, 2024, 8:41 a.m. |
| Headline | cShell Botnet IOCs |
| Title | cShell Botnet IOCs - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 9/1/13 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://1275.ru/ioc/8607/cshell-botnet-iocs/?mtm_campaign=rss |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 369 | pastebin.com |
|
| Details | md5 | 2 | 29d6ef7365c18d243163a648fa6cd697 |
|
| Details | md5 | 2 | cd8bf4ce178ef5ddac77933d03ffb381 |
|
| Details | IPv4 | 2 | 195.178.110.6 |
|
| Details | IPv4 | 2 | 45.148.10.176 |
|
| Details | IPv4 | 2 | 45.148.10.203 |
|
| Details | IPv4 | 2 | 45.148.10.46 |
|
| Details | IPv4 | 2 | 51.81.121.129 |
|
| Details | Url | 2 | http://51.81.121.129/carm |
|
| Details | Url | 2 | http://51.81.121.129/sshell.service |
|
| Details | Url | 2 | https://pastebin.com/raw/2ahndgts |
|
| Details | Url | 2 | https://pastebin.com/raw/7beug9vk |
|
| Details | Url | 2 | https://pastebin.com/raw/8kgsnmfr |