Cova and Nosu: a new loader spreads a new stealer | Bitsight
Tags
Common Information
| Type | Value |
|---|---|
| UUID | 915c8121-35e2-4ba7-9fc7-403d2b9c170a |
| Fingerprint | 8f38394aaa930e83 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Dec. 6, 2022, midnight |
| Added to db | Dec. 21, 2022, 4:50 p.m. |
| Last updated | Oct. 22, 2024, 3:44 p.m. |
| Headline | Cova and Nosu: a new loader spreads a new stealer |
| Title | Cova and Nosu: a new loader spreads a new stealer | Bitsight |
| Detected Hints/Tags/Attributes | 46/2/15 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://www.bitsight.com/blog/cova-and-nosu-new-loader-spreads-new-stealer |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 468 | ✔ | BitSight Security Ratings Blog | https://www.bitsight.com/blog/rss.xml | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 14 | www.bitsight.com |
|
| Details | File | 11 | client.php |
|
| Details | sha256 | 1 | 11ffd58d2707121ab5363d6c08560a50d3209bf60dd4b8eec066eb4241aa7bee |
|
| Details | sha256 | 1 | b0eaf0cc2f88701a216bb994a7bcbd43cb21ac11e295af9f99e6b56d6797ea01 |
|
| Details | sha256 | 1 | 8d6ba779eb230cb2f0f2db98179d5342f0d9f2cd74c7537d736ecea156195292 |
|
| Details | sha256 | 1 | a1ae4a7440c7f2f0d03c6f2e05ff97b875e8295cf2b340b96fdda919af6c7eb5 |
|
| Details | sha256 | 1 | 6499cadaea169c7dfe75b55f9c949659af49649a10c8b593a8db378692a11962 |
|
| Details | sha256 | 1 | b369ed704c293b76452ee1bdd99a69bbb76b393a4a9d404e0b5df59a00cff074 |
|
| Details | IPv4 | 1 | 80.66.77.6 |
|
| Details | IPv4 | 1 | 80.66.77.54 |
|
| Details | IPv4 | 1 | 80.66.77.63 |
|
| Details | IPv4 | 1 | 80.66.77.95 |
|
| Details | IPv4 | 1 | 80.66.77.125 |
|
| Details | IPv4 | 1 | 80.66.77.33 |
|
| Details | Url | 1 | https://www.bitsight.com/blog/systembc-multipurpose-proxy-bot-still-breathes |