DDosia Project: How NoName057(16) is trying to improve the efficiency of DDoS attacks - Avast Threat Labs
Tags
cmtmf-attack-pattern: Native Code
country: Ukraine
attack-pattern: Data Direct Model Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Tool - T1588.002 Brute Force - T1110 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID c84896f9-6431-4b4d-888f-1d481609d621
Fingerprint 3f11d153284884d5
Analysis status DONE
Considered CTI value 1
Text language
Published April 18, 2023, 2:22 p.m.
Added to db Aug. 13, 2023, 4:48 p.m.
Last updated Nov. 17, 2024, 12:58 p.m.
Headline DDosia Project: How NoName057(16) is trying to improve the efficiency of DDoS attacks
Title DDosia Project: How NoName057(16) is trying to improve the efficiency of DDoS attacks - Avast Threat Labs
Detected Hints/Tags/Attributes 63/3/14
Source URLs
Redirection Url
Details Source https://decoded.avast.io/martinchlumecky/ddosia-project-how-noname05716-is-trying-to-improve-the-efficiency-of-ddos-attacks/?utm_source=rss&utm_medium=rss&utm_campaign=ddosia-project-how-noname05716-is-trying-to-improve-the-efficiency-of-ddos-attacks
URL Provider
Details Provider Source level domain
Details avast.io decoded.avast.io
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 100 ✔ Avast Threat Labs https://decoded.avast.io/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 20 
nordvpn.com
Details Domain 1 
pkcds2cas7.ignorelist.com
Details Domain 1 
pqw2vsi21mx74.twilightparadox.com
Details Domain 1 
trafficsearch.ddns.net
Details Domain 1 
trafficanalyzer.bounceme.net
Details File 5 
client_id.txt
Details sha256 1 
deac48f968269bb5e75ceb9417f6680d8787a03ba0768e25d8716f189a079574
Details sha256 1 
5c1be24a5fa75b70c50515a061d2d3ce911b785188328408edc0a79dfc5e3173
Details IPv4 1 
212.73.134.208
Details IPv4 18 
127.0.0.2
Details IPv4 1 
94.140.115.129
Details IPv4 619 
0.0.0.0
Details IPv4 3 
94.140.114.239
Details IPv4 1 
161.35.199.2