Dynamically Generated Kryptik Fast Flux Domains and How to Detect Them
Tags
country: Panama
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Fast Flux Dns - T1568.001 Fast Flux Dns - T1325 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Whois - T1596.002
Show in Graph
Common Information
Type Value
UUID 74c2ca6f-57aa-44f8-a82d-0ddda6117535
Fingerprint ae5026e56ca3248f
Analysis status DONE
Considered CTI value -2
Text language
Published June 24, 2013, 1:52 p.m.
Added to db Jan. 18, 2023, 9:21 p.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline NetWitness Community
Title Dynamically Generated Kryptik Fast Flux Domains and How to Detect Them
Detected Hints/Tags/Attributes 37/2/1
Source URLs
Redirection Url
Details Source https://community.rsa.com/community/products/netwitness/blog/2013/06/24/dynamically-generated-kryptik-fast-flux-domains-and-how-to-detect-them
URL Provider
Details Provider Source level domain
Details rsa.com community.rsa.com
Attributes
Details Type #Events CTI Value
Details Threat Actor Identifier - APT 297 
APT27