Bladabindi Remains A Constant Threat By Using Dynamic DNS Services
Tags
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Dynamic Dns - T1311 Dynamic Dns - T1333 Ip Addresses - T1590.005 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID b96714b7-138f-4793-b47d-9639891f5338
Fingerprint ec1869c2c1322e05
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 30, 2016, midnight
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Oct. 15, 2024, 9:59 p.m.
Headline Bladabindi Remains A Constant Threat By Using Dynamic DNS Services
Title Bladabindi Remains A Constant Threat By Using Dynamic DNS Services
Detected Hints/Tags/Attributes 46/1/14
Source URLs
Redirection Url
Details Source https://blog.fortinet.com/2016/11/30/bladabindi-remains-a-constant-threat-by-using-dynamic-dns-services
Details Source https://www.fortinet.com/blog/threat-research/bladabindi-remains-a-constant-threat-by-using-dynamic-dns-services.html
URL Provider
Details Provider Source level domain
Details fortinet.com blog.fortinet.com
Details fortinet.com www.fortinet.com
Attributes
Details Type #Events CTI Value
Details Domain 23 
hopto.org
Details Domain 8 
myftp.biz
Details Domain 1 
agent.li
Details Domain 1 
prosa15.myftp.biz
Details File 53 
server.exe
Details md5 1 
050ed846adcc1b8729af0a70a0fefe4d
Details md5 1 
2681e81bb4c4b3e6338ce2a456fb93a7
Details md5 1 
8e78a69ca187088abbea70727d268e90
Details md5 1 
b88ece4c04f706c9717bbe6fbda49ed2
Details md5 1 
c4d7f8abbf369dc795fc7f2fdad65003
Details Windows Registry Key 1 
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\050ed846adcc1b8729af0a70a0fefe4d
Details Windows Registry Key 1 
HKCU\Software\050ed846adcc1b8729af0a70a0fefe4d
Details Windows Registry Key 1 
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\050ed846adcc1b8729af0a70a0fefe4d
Details Windows Registry Key 1 
HKCU\di