Sefnit's Tor botnet C&C details - Microsoft Security Blog
Tags
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Windows Service - T1543.003 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 7745b116-baf6-402a-ba2c-48472dc49f8b
Fingerprint 95892f19ad3716d3
Analysis status DONE
Considered CTI value 0
Text language
Published March 5, 2014, 1:50 p.m.
Added to db Jan. 18, 2023, 9:18 p.m.
Last updated Sept. 1, 2024, 7:57 p.m.
Headline Sefnit’s Tor botnet C&C details
Title Sefnit's Tor botnet C&C details - Microsoft Security Blog
Detected Hints/Tags/Attributes 35/1/19
Source URLs
Redirection Url
Details Source https://cloudblogs.microsoft.com/microsoftsecure/2014/03/05/sefnits-tor-botnet-cc-details/
Details Source https://www.microsoft.com/security/blog/2014/03/05/sefnits-tor-botnet-cc-details/
URL Provider
Details Provider Source level domain
Details microsoft.com www.microsoft.com
Details microsoft.com cloudblogs.microsoft.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
sefnit.at
Details Domain 1 
6tlpoektcb3gudt3.onion
Details Domain 1 
7fyipi6vxyhpeouy.onion
Details Domain 1 
7sc6xyn3rrxtknu6.onion
Details Domain 1 
ijqqxydixp4qbzce.onion
Details Domain 1 
l77ukkijtdca2tsy.onion
Details Domain 1 
lorpzyxqxscsmscx.onion
Details Domain 1 
lqqciuwa5yzxewc3.onion
Details Domain 1 
lqqth7gagyod22sc.onion
Details Domain 1 
mdyxc4g64gi6fk7b.onion
Details Domain 1 
onhiimfoqy4acjv4.onion
Details Domain 1 
pomyeasfnmtn544p.onion
Details Domain 1 
qxc7mc24mj7m4e2o.onion
Details Domain 1 
wsytsa2omakx655w.onion
Details Domain 1 
ye63peqbnm6vctar.onion
Details Domain 1 
181084e525a65ef540c63d60ce07f836.ph
Details File 2 
wins.exe
Details md5 1 
049e7fb749be2cdf169e28bb0a27254f
Details md5 1 
181084e525a65ef540c63d60ce07f836