New Godlua Malware Evades Traffic Monitoring via DNS over HTTPS
Tags
cmtmf-attack-pattern: Data Manipulation
attack-pattern: Confluence - T1213.001 Data Manipulation - T1641 Data Manipulation - T1565 Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID 963a1813-ad19-4b93-a45b-722d44bdf840
Fingerprint b528ad9b4ab66689
Analysis status DONE
Considered CTI value 0
Text language
Published July 3, 2019, midnight
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Oct. 16, 2024, 12:30 a.m.
Headline New Godlua Malware Evades Traffic Monitoring via DNS over HTTPS
Title New Godlua Malware Evades Traffic Monitoring via DNS over HTTPS
Detected Hints/Tags/Attributes 27/2/2
Source URLs
Redirection Url
Details Source https://www.bleepingcomputer.com/news/security/new-godlua-malware-evades-traffic-monitoring-via-dns-over-https/
URL Provider
Details Provider Source level domain
Details bleepingcomputer.com www.bleepingcomputer.com
Attributes
Details Type #Events CTI Value
Details CVE 38 
cve-2019-3396
Details Domain 2 
liuxiaobei.com