TrickBot spread by Necurs botnet, adds Nordic countries to its targets
Tags
| country: | Australia Denmark Finland France Norway Sweden |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Botnet - T1583.005 Botnet - T1584.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 |
Common Information
| Type | Value |
|---|---|
| UUID | aa4cc203-5dd7-4620-b754-db19593588bf |
| Fingerprint | 75171c5128b2879c |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | June 8, 2017, 10 a.m. |
| Added to db | Jan. 18, 2023, 11:15 p.m. |
| Last updated | Sept. 3, 2024, 11:18 a.m. |
| Headline | TrickBot spread by Necurs botnet, adds Nordic countries to its targets |
| Title | TrickBot spread by Necurs botnet, adds Nordic countries to its targets |
| Detected Hints/Tags/Attributes | 46/3/32 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | mybutterhalf.com |
|
| Details | Domain | 1 | manish-choudhary.com |
|
| Details | Domain | 1 | choralia.net |
|
| Details | Domain | 1 | chqm168.com |
|
| Details | Domain | 1 | shopf3.com |
|
| Details | Domain | 1 | beursgays.com |
|
| Details | Domain | 1 | shreekamothe.com |
|
| Details | Domain | 1 | micolon.de |
|
| Details | Domain | 1 | mytraveltrip.in |
|
| Details | Domain | 1 | xinding.com |
|
| Details | Domain | 1 | musee-champollion.fr |
|
| Details | Domain | 1 | svagin.dk |
|
| Details | Domain | 1 | spocom.de |
|
| Details | Domain | 1 | muldefischer.de |
|
| Details | sha256 | 2 | 79d96a62622e4efb01fda23cf81b759e0059ad3cd3083acff7fb4174b0b3d40c |
|
| Details | IPv4 | 1 | 185.6.127.134 |
|
| Details | IPv4 | 2 | 149.202.30.126 |
|
| Details | IPv4 | 1 | 212.24.110.76 |
|
| Details | Url | 1 | http://mybutterhalf.com/7gyb3ds |
|
| Details | Url | 1 | http://manish-choudhary.com/7gyb3ds |
|
| Details | Url | 1 | http://choralia.net/7gyb3ds |
|
| Details | Url | 1 | http://chqm168.com/7gyb3ds |
|
| Details | Url | 1 | http://shopf3.com/7gyb3ds |
|
| Details | Url | 1 | http://beursgays.com/7gyb3ds |
|
| Details | Url | 1 | http://shreekamothe.com/7gyb3ds |
|
| Details | Url | 1 | http://micolon.de/7gyb3ds |
|
| Details | Url | 1 | http://mytraveltrip.in/7gyb3ds |
|
| Details | Url | 1 | http://xinding.com/7gyb3ds |
|
| Details | Url | 1 | http://musee-champollion.fr/7gyb3ds |
|
| Details | Url | 1 | http://svagin.dk/7gyb3ds |
|
| Details | Url | 1 | http://spocom.de/7gyb3ds |
|
| Details | Url | 1 | http://muldefischer.de/7gyb3ds |