Pink, a botnet that competed with the vendor to control the massive infected devices
Tags
country: China
maec-delivery-vectors: Watering Hole
attack-pattern: Data Models Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Firmware - T1592.003 Hardware - T1592.001 Ip Addresses - T1590.005 Private Keys - T1552.004 Server - T1583.004 Server - T1584.004 Web Services - T1583.006 Web Services - T1584.006 Connection Proxy - T1090 Private Keys - T1145
Show in Graph
Common Information
Type Value
UUID bf1fe494-0a5c-4edb-977b-7bf5529951b6
Fingerprint bc90d2d00c37bbf1
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 29, 2021, midnight
Added to db Sept. 26, 2022, 9:33 a.m.
Last updated Nov. 15, 2024, 12:36 p.m.
Headline Pink, a botnet that competed with the vendor to control the massive infected devices
Title Pink, a botnet that competed with the vendor to control the massive infected devices
Detected Hints/Tags/Attributes 70/3/160
Source URLs
Redirection Url
Details Source https://blog.netlab.360.com/pink-en/
URL Provider
Details Provider Source level domain
Details 360.com blog.netlab.360.com
Attributes
Details Type #Events CTI Value
Details md5 2 
1197994610b2ffb60edbb5ab0c125bc0
Details md5 2 
167364ad0d623d17332f09dbb23a980e
Details md5 2 
175b603082599838d9760b2ab264da6f
Details md5 2 
1a6dce9916b9b6ae50c1457f5f1dfbbd
Details md5 2 
229503686c854bb39efdc84f05b071b9
Details md5 2 
25a07e3ef483672b4160aa12d67f5201
Details md5 2 
262a4e242c9ebeba79aa018d8b38d229
Details md5 2 
29d0afd2a244c9941976ebf2f0f6597f
Details md5 2 
2befedd020748ff6d9470afad41bd28c
Details md5 2 
2ca5810744173889b2440e4f25b39bd4
Details md5 2 
36e48e141943a67c6fdeaa84d7af21cc
Details md5 2 
3a620ff356686b461e0e1a12535bea24
Details md5 2 
41bbe8421c0a78067bae74832c375fe8
Details md5 2 
45ee78d11db54acfdda27c19e44c3126
Details md5 2 
4830c3950957093dac27d4e87556721e
Details md5 2 
484761f281cb2e64d9db963a463efca5
Details md5 2 
48a7f2799bf452f10f960159f6a405d3
Details md5 2 
494412638dc8d573172c1991200e1399
Details md5 2 
4c83ad66189a7c4d2f2afdbfb94d0e65
Details md5 2 
50270de8d5783bb0092bf1677b93c97b
Details md5 2 
54aa9e716567bd0159f4751916f7f0d1
Details md5 2 
5ae1fec20c2f720269c2dc94732187e8
Details md5 2 
5b62a9bd3431c2fd55283380d81c00fa
Details md5 2 
5c322610e1845d0be9ccfc8a8b6a4c4f
Details md5 2 
5c4f8dae67dad8cac141afa00847b418
Details md5 2 
5d0d034845bd69179bf678104c046dc1
Details md5 2 
60658ef214c960147200d432eece3e13
Details md5 2 
60a2b1bb02a60ac49f7cc1b47abdf60c
Details md5 2 
610f0aadba3be1467125607bf2ba2aaf
Details md5 2 
66a068fd860bda7950fde8673d1b5511
Details md5 2 
6c4de9bd490841f0a6c68638f7253c65
Details md5 2 
72c531a813b637af3ea56f288d65cdb7
Details md5 2 
7608b24c8dcf3cd7253dbd5390df8b1f
Details md5 2 
7645a30a92863041cf93a7d8a9bfba1a
Details md5 2 
857fc3c7630859c20d35d47899b75699
Details md5 2 
861af6b5a3fea01f2e95c90594c62e9d
Details md5 2 
8e86be3be36094e0f5b1a6e954dbe7c2
Details md5 2 
8fbcd7397d451e87c60a0328efe8cd5d
Details md5 2 
987a9befb715b6346e7ad0f6ac87201f
Details md5 2 
9eb147e3636a4bb35f0ee1540d639a1b
Details md5 2 
aa2fc46dd94cbf52aef5e66cdd066a40
Details Domain 2 
cnc.pinklander.com
Details Domain 291 
raw.githubusercontent.com
Details File 2 
dlist.txt
Details Github username 2 
pink78day
Details md5 2 
5b62596bc1453d51cc7241086464f294
Details md5 2 
484417e6f65c8e18e684d60c03c4680a
Details md5 2 
9ec5bd857b998e60663e88a70480b828
Details md5 2 
451a3cf94191c64b5cd1be1a80be7799
Details md5 2 
450aa79da035a8a55ca4c0e6b1025b50
Details md5 2 
47ed94977b45099f1ef5c7701b2d25dc
Details md5 2 
06d6ad872e97e47e55f5b2777f78c1ba
Details md5 2 
07cd100c7187e9f4c94b54ebc60c0965
Details md5 2 
0f25b0d54d05e58f5900c61f219341d3
Details md5 2 
0f89e43ea433fdfd18a551f755473388
Details md5 2 
ae8b519504afc52ee3aceef087647d36
Details md5 2 
b0202f1e8bded9c451c734e3e7f4e5d8
Details md5 2 
b6f91ad027ded41e2b1f5bea375c4a42
Details md5 2 
b9935859b3682c5023d9bcb71ee2fece
Details md5 2 
b9d1c31f59c67289928e1bb7710ec0ba
Details md5 2 
bec2f560b7c771d7066da0bee5f2e001
Details md5 2 
c2efa35b34f67a932a814fd4636dd7cb
Details md5 2 
c839aff2a2680fb5676f12531fecba3b
Details md5 2 
c94504531159b8614b95c62cca6c50c9
Details md5 2 
dfe0c9d36062dd3797de403a777577a6
Details md5 2 
e19a1106030e306cc027d56f0827f5ce
Details md5 2 
f09b45daadc872f2ac3cc6c4fe9cff90
Details md5 2 
f5381892ea8bd7f5c5b4556b31fd4b26
Details md5 2 
f55ad7afbe637efdaf03d4f96e432d10
Details md5 2 
f62d4921e3cb32e229258b4e4790b63a
Details md5 2 
f81c8227b964ddc92910890effff179b
Details md5 2 
fc5b55e9c6a9ddef54a256cc6bda3804
Details md5 2 
fe8e830229bda85921877f606d75e96d
Details md5 2 
fee6f8d44275dcd2e4d7c28189c5f5be
Details IPv4 2 
144.202.109.110
Details IPv4 2 
155.138.140.245
Details IPv4 198 
1.1.1.1
Details IPv4 2 
114.25.0.0
Details IPv4 2 
36.227.0.0
Details IPv4 2 
59.115.0.0
Details IPv4 2 
1.224.0.0
Details IPv4 2 
45.32.21.251
Details IPv4 2 
167.179.80.159
Details IPv4 2 
114.55.124.13
Details IPv4 2 
140.82.40.29
Details IPv4 2 
209.250.247.60
Details IPv4 2 
203.56.252.137
Details IPv4 2 
180.101.192.199
Details IPv4 2 
207.148.70.25
Details IPv4 2 
45.32.125.150
Details IPv4 2 
45.32.125.188
Details IPv4 2 
45.32.174.105
Details IPv4 2 
5.45.79.32
Details IPv4 2 
1.198.50.63
Details IPv4 2 
1.63.19.10
Details IPv4 2 
104.207.142.132
Details IPv4 2 
108.61.158.59
Details IPv4 2 
111.61.248.32
Details IPv4 2 
112.26.43.199
Details IPv4 2 
113.106.175.43
Details IPv4 2 
117.131.10.102
Details IPv4 2 
123.13.215.89
Details IPv4 2 
125.74.208.220
Details IPv4 2 
140.82.24.94
Details IPv4 2 
140.82.30.245
Details IPv4 2 
140.82.53.129
Details IPv4 2 
144.202.38.129
Details IPv4 2 
149.28.142.167
Details IPv4 2 
167.179.110.44
Details IPv4 2 
173.254.204.124
Details IPv4 2 
182.139.215.4
Details IPv4 2 
207.148.4.202
Details IPv4 2 
218.25.236.62
Details IPv4 2 
222.216.226.29
Details IPv4 2 
45.32.26.220
Details IPv4 2 
45.76.104.146
Details IPv4 2 
45.77.165.83
Details IPv4 2 
45.77.198.232
Details IPv4 2 
45.88.42.38
Details IPv4 2 
61.149.204.230
Details IPv4 2 
66.42.114.73
Details IPv4 2 
66.42.67.148
Details IPv4 2 
8.6.193.191
Details IPv4 2 
95.179.238.22
Details Url 2 
http://209.250.247.60/dlist.txt
Details Url 2 
http://1.198.50.63:1088/dlist.txt
Details Url 2 
http://1.63.19.10:19010/var/sss/dlist.txt
Details Url 2 
http://104.207.142.132/dlist.txt
Details Url 2 
http://108.61.158.59/dlist.txt
Details Url 2 
http://111.61.248.32:1088/dlist.txt
Details Url 2 
http://112.26.43.199:81/dlist.txt
Details Url 2 
http://113.106.175.43:19010/tmp/pinkdown/dlist.txt
Details Url 2 
http://117.131.10.102:1088/d/dlist.txt
Details Url 2 
http://123.13.215.89:8005/d/dlist.txt
Details Url 2 
http://125.74.208.220:81/dlist.txt
Details Url 2 
http://140.82.24.94/dlist.txt
Details Url 2 
http://140.82.30.245/d/dlist.txt
Details Url 2 
http://140.82.53.129/dlist.txt
Details Url 2 
http://144.202.38.129/dlist.txt
Details Url 2 
http://149.28.142.167/p/dlist.txt
Details Url 2 
http://149.28.142.167/p1/dlist.txt
Details Url 2 
http://155.138.140.245/dlist.txt
Details Url 2 
http://167.179.110.44/dlist.txt
Details Url 2 
http://173.254.204.124:81/dlist.txt
Details Url 2 
http://182.139.215.4:82/dlist.txt
Details Url 2 
http://207.148.4.202/dlist.txt
Details Url 2 
http://218.25.236.62:1987/d/dlist.txt
Details Url 2 
http://218.25.236.62:1988/d/dlist.txt
Details Url 2 
http://222.216.226.29:81/dlist.txt
Details Url 2 
http://45.32.26.220/dlist.txt
Details Url 2 
http://45.76.104.146/dlist.txt
Details Url 2 
http://45.77.165.83/p1/dlist.txt
Details Url 2 
http://45.77.198.232/p1/dlist.txt
Details Url 2 
http://45.88.42.38/p1/dlist.txt
Details Url 2 
http://61.149.204.230:81/dlist.txt
Details Url 2 
http://66.42.114.73/dlist.txt
Details Url 2 
http://66.42.67.148/dlist.txt
Details Url 2 
http://8.6.193.191/dlist.txt
Details Url 2 
http://95.179.238.22/dlist.txt
Details Url 2 
https://raw.githubusercontent.com/pink78day/helloworld/master/dlist.txt