UltraDNS Client Redirection Service
Tags
attack-pattern: Malware - T1587.001 Malware - T1588.001
Show in Graph
Common Information
Type Value
UUID 919bbe3e-39b6-4530-a0e2-62304b699bfd
Fingerprint 79d777caaa5f4426
Analysis status DONE
Considered CTI value 0
Text language
Published March 1, 2016, midnight
Added to db Jan. 18, 2023, 7:32 p.m.
Last updated Nov. 22, 2024, 10:51 a.m.
Headline HTTP/1.1 404 Not Found
Title UltraDNS Client Redirection Service
Detected Hints/Tags/Attributes 4/1/3
Source URLs
Redirection Url
Details Source http://blog.airbuscybersecurity.com/post/2014/01/plugx-some-uncovered-points.html
Details Source http://blog.airbuscybersecurity.com/post/2014/05/APT-Kill-chain-Part-3-
Details Source http://blog.airbuscybersecurity.com/post/2014/07/The-Eye-of-the-Tiger2
Details Source http://blog.airbuscybersecurity.com/post/2014/10/LeoUncia-and-OrcaRat
Details Source http://blog.airbuscybersecurity.com/post/2014/11/APT-Kill-chain-Part-5-
Details Source http://blog.airbuscybersecurity.com/post/2015/06/Latest-improvements-in-PlugX
Details Source http://blog.airbuscybersecurity.com/post/2015/08/Volatility-plugin-for-PlugX-updated
Details Source http://blog.airbuscybersecurity.com/post/2016/03/FILELESS-MALWARE-
Details Source http://blog.airbuscybersecurity.com/post/2016/06/Getting-a-PlugX-builder
Details Source http://blog.airbuscybersecurity.com/post/2016/11/Analysing-the-Hancitor-Maldoc
URL Provider
Details Provider Source level domain
Details airbuscybersecurity.com blog.airbuscybersecurity.com
Attributes
Details Type #Events CTI Value
Details Domain 2 
blog.airbuscybersecurity.com
Details File 3 
blog.ai
Details IPv4 5 
3.75.99.50