DNS Early Detection - RansomHUB - Breaking the Kill Chain | Infoblox
Tags
attack-pattern: Data Model Dns - T1071.004 Dns - T1590.002 Domain Generation Algorithms - T1637.001 Domain Generation Algorithms - T1568.002 Domain Generation Algorithms - T1520 Domain Generation Algorithms - T1483 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID af5fc37d-475c-4b9e-8d7d-78864c51a70f
Fingerprint a098e5510d9e8eab
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 2, 2024, 3 p.m.
Added to db Oct. 2, 2024, 5:49 p.m.
Last updated Nov. 16, 2024, 11:13 a.m.
Headline DNS Early Detection – RansomHub – Breaking the Kill Chain
Title DNS Early Detection - RansomHUB - Breaking the Kill Chain | Infoblox
Detected Hints/Tags/Attributes 66/1/9
Source URLs
Redirection Url
Details Source https://blogs.infoblox.com/threat-intelligence/dns-early-detection-ransomhub-breaking-the-kill-chain/
URL Provider
Details Provider Source level domain
Details infoblox.com blogs.infoblox.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 61 ✔ Infoblox Blog https://blogs.infoblox.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 3 
40031.co
Details Domain 5 
samuelelena.co
Details Domain 14 
www.infoblox.com
Details Domain 36 
media.defense.gov
Details File 384 
www.inf
Details File 4 
dns_uoo117652-21.pdf
Details Url 4 
https://www.infoblox.com/threat-intel
Details Url 1 
https://www.infoblox.com/products/threat-defense
Details Url 4 
https://media.defense.gov/2021/mar/03/2002593055/-1/-1/0/csi_protective