Threat Alert: Mirai/Gafgyt Fork with New DDoS Modules Discovered
Tags
country: Vietnam
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Exploits - T1587.004 Exploits - T1588.005 Junk Data - T1001.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Default Credentials Denial Of Service
Show in Graph
Common Information
Type Value
UUID 8285cac4-b079-4fd7-9669-7a9caa3f855c
Fingerprint a7719a818c57629b
Analysis status DONE
Considered CTI value 1
Text language
Published Sept. 7, 2021, 2:58 p.m.
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 14, 2024, 7:54 p.m.
Headline UNKNOWN
Title Threat Alert: Mirai/Gafgyt Fork with New DDoS Modules Discovered
Detected Hints/Tags/Attributes 58/2/43
Source URLs
Redirection Url
Details Source https://cujo.com/mirai-gafgyt-with-new-ddos-modules-discovered/
URL Provider
Details Provider Source level domain
Details cujo.com cujo.com
Attributes
Details Type #Events CTI Value
Details Domain 27 
developers.google.com
Details Domain 1 
fast.no
Details Domain 1 
www.thesubot.de
Details Domain 1 
www.billybobbot.com
Details Domain 1 
feedback.redkolibri.com
Details Domain 10 
bins.sh
Details File 1 
crawler.asp
Details sha256 1 
2be9013823dbcb7dd4cbed30e37ffd51ac9b3a0f78d168879c6a59ff1b2704d8
Details sha256 1 
009f8f752458e6bbd340ca3cd34f5ebc520b2846fdbb5339add824d31f195413
Details IPv4 1 
103.161.17.233
Details IPv4 295 
8.8.8.8
Details IPv4 63 
8.8.4.4
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.sparc
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.mpsl
Details Url 1 
https://developers.google.com/speed/public-dns/docs/intro
Details Url 1 
http://fast.no/support/crawler.asp
Details Url 1 
http://www.billybobbot.com/crawler
Details Url 1 
http://feedback.redkolibri.com
Details Url 1 
http://103.161.17.233/bins.sh
Details Url 1 
http://103.161.17.233/korpze1233121337.arm
Details Url 1 
http://103.161.17.233/korpze1233121337.arm4
Details Url 1 
http://103.161.17.233/korpze1233121337.arm5
Details Url 1 
http://103.161.17.233/korpze1233121337.arm6
Details Url 1 
http://103.161.17.233/korpze1233121337.m68k
Details Url 1 
http://103.161.17.233/korpze1233121337.mips
Details Url 1 
http://103.161.17.233/korpze1233121337.x86
Details Url 1 
http://103.161.17.233/korpze1233121337.ppc
Details Url 1 
http://103.161.17.233/korpze1233121337.sparc
Details Url 1 
http://103.161.17.233/korpze1233121337.i586
Details Url 1 
http://103.161.17.233/korpze1233121337.i686
Details Url 1 
http://103.161.17.233/korpze1233121337.mpsl
Details Url 1 
http://103.161.17.233/korpze1233121337.sh4
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.arm
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.arm4
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.arm5
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.arm6
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.m68k
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.mips
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.x86
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.ppc
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.i586
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.i686
Details Url 1 
http://103.161.17.233/bins/korpze1233121337.sh4