Gafgyt Botnet IOCs - SEC-1275-1
Tags
| attack-pattern: | Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 |
Common Information
| Type | Value |
|---|---|
| UUID | c845938e-6090-47e2-a8f0-75a8208b8686 |
| Fingerprint | f8508caa5aa7f8c7 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 4, 2024, midnight |
| Added to db | Dec. 4, 2024, 7:04 a.m. |
| Last updated | Dec. 12, 2024, 8:47 a.m. |
| Headline | Gafgyt Botnet IOCs |
| Title | Gafgyt Botnet IOCs - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 9/1/29 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://1275.ru/ioc/8345/gafgyt-botnet-iocs/?mtm_campaign=rss |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 3 | cve.sh |
|
| Details | sha256 | 2 | 0b7e14e3305fd25b250ad494c014b0f8dfefaf0f3e8413bd797db12dd2eb9d8c |
|
| Details | sha256 | 2 | 156c85a09a1d5d753ce3fd128e0bb6097bb5b18e6cc0ffe6f9bc99a218a21ed9 |
|
| Details | sha256 | 2 | 19778568781fd397ee2415d0a3593ffcaff4f333cdc27e52a1b23e07de08fdb6 |
|
| Details | sha256 | 1 | 36ee47d10acbf8fbc7b16d4d237e2be567491b95dcd333856268c6c63a02f358 |
|
| Details | sha256 | 2 | 68c215494fd35e097bf76eb3886b95ec66fdc707ebcf10f221b4db4ac2cd6d70 |
|
| Details | sha256 | 2 | 6b385dc32daff689c1c448bf5f9151996abbac730e167a9cbfa9111591f253ea |
|
| Details | sha256 | 2 | a79a9653209c9d942dee0be597e04845fc5250880edcc5c3cb50110153925a03 |
|
| Details | sha256 | 2 | b7f0ac1551ab58a1b84ba8e63dfc98dd126f7abe686137cbffc8ff95bfbac1ba |
|
| Details | sha256 | 2 | bb2bd8819045055af5295c23d1293b2d215fabe7dcf097813b9624ab98a13976 |
|
| Details | sha256 | 2 | c1c03eab6bbca461f4a9dc7395103cdb0aa018563e835150c66228f3d7edadaa |
|
| Details | sha256 | 2 | ed6c93faebd9a60e132f4f952a1b516e758ce0e445b225eb702dfd2c8c2db6c0 |
|
| Details | sha256 | 2 | f7004355f2bf653d3f055bc674822f99a8ff3692a02c1aec6b727a782e37b836 |
|
| Details | sha256 | 2 | f8388cba15175fa7fda8daacfd095972e1a96faaabeede411f99f42f71ae395b |
|
| Details | IPv4 | 1 | 178.215.238.24 |
|
| Details | IPv4 | 6 | 178.215.238.31 |
|
| Details | Url | 1 | http://178.215.238.24/rbot |
|
| Details | Url | 1 | http://178.215.238.31/atlas.i586 |
|
| Details | Url | 1 | http://178.215.238.31/bins/atlas.arm4 |
|
| Details | Url | 1 | http://178.215.238.31/bins/atlas.arm5 |
|
| Details | Url | 1 | http://178.215.238.31/bins/atlas.arm6 |
|
| Details | Url | 1 | http://178.215.238.31/bins/atlas.arm7 |
|
| Details | Url | 1 | http://178.215.238.31/bins/atlas.i586 |
|
| Details | Url | 1 | http://178.215.238.31/bins/atlas.i686 |
|
| Details | Url | 1 | http://178.215.238.31/bins/atlas.m68k |
|
| Details | Url | 1 | http://178.215.238.31/bins/atlas.mips |
|
| Details | Url | 1 | http://178.215.238.31/bins/atlas.mipsel |
|
| Details | Url | 1 | http://178.215.238.31/bins/atlas.sh4 |
|
| Details | Url | 1 | http://178.215.238.31/cve.sh |