DreamBus Botnet Resurfaces, Targets RocketMQ vulnerability | Official Juniper Networks Blogs
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Cron - T1053.003 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Tool - T1588.002 Vulnerabilities - T1588.006 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 8235586e-5996-4bf7-9e2d-35c61eed2ee7
Fingerprint b0a238498ddfd38b
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 28, 2023, 1 p.m.
Added to db Oct. 24, 2023, 1:14 p.m.
Last updated Oct. 14, 2024, 2:07 p.m.
Headline DreamBus Botnet Resurfaces, Targets RocketMQ vulnerability
Title DreamBus Botnet Resurfaces, Targets RocketMQ vulnerability | Official Juniper Networks Blogs
Detected Hints/Tags/Attributes 58/2/14
Source URLs
Redirection Url
Details Source https://blogs.juniper.net/en-us/threat-research/dreambus-botnet-resurfaces-targets-rocketmq-vulnerability
URL Provider
Details Provider Source level domain
Details juniper.net blogs.juniper.net
Attributes
Details Type #Events CTI Value
Details CVE 51 
cve-2023-33246
Details Domain 1 
tor2web.in
Details Domain 1 
ru6r4inkaf4thlgflg4iqs5mhqwqubols5qagspvya4whp3dgbvmyhad.onion
Details Domain 2 
p2pool.it
Details sha256 1 
1d0c3e35324273ffeb434f929f834b59dcc6cdd24e9204abd32cc0abefd9f047
Details sha256 1 
601a2ff4a7244ed41dda1c1fc71b10d3cfefa34e2ef8ba71598f41f73c031443
Details sha256 1 
1c49d7da416474135cd35a9166f2de0f8775f21a27cd47d28be48a2ce580d58d
Details sha256 1 
153b0d0916bd3150c5d4ab3e14688140b34fdd34caac725533adef8f4ab621e2
Details sha256 1 
e71caf456b73dade7c65662ab5cf55e02963ee3f2bfb47e5cffc1b36c0844b4d
Details sha256 1 
9f740c9042a7c3c03181d315d47986674c50c2fca956915318d7ca9d2a086b7f
Details sha256 1 
371319cd17a1ab2d3fb2c79685c3814dc24d67ced3e2f7663806e8960ff9334c
Details sha256 1 
21a9f094eb65256e0ea2adb5b43a85f5abfbfdf45f855daab3eb6749c6e69417
Details sha256 1 
0a8779a427aba59a66338d85e28f007c6109c23d6b0a6bd4b251bf0f543a029f
Details IPv4 2 
92.204.243.155