Kelihos Botnet
Tags
country: Russia
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID da1b092b-db71-4589-a3f9-aa2c0dbf3485
Fingerprint a78d4b9fac73a5db
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 13, 2014, 1:27 p.m.
Added to db Jan. 18, 2023, 8:53 p.m.
Last updated Oct. 31, 2024, 11:44 a.m.
Headline Kelihos Botnet
Title Kelihos Botnet
Detected Hints/Tags/Attributes 55/2/22
Source URLs
Redirection Url
Details Source https://blogs.infoblox.com/community/kelihos-botnet/
URL Provider
Details Provider Source level domain
Details infoblox.com blogs.infoblox.com
Attributes
Details Type #Events CTI Value
Details CVE 48 
cve-2010-2568
Details Domain 1 
google.ink
Details Domain 1 
pevhyvys.ru
Details Domain 1 
c-67-177-139-18.hsd1.mi.comcast.net
Details Domain 1 
ns2.biocruc.com
Details Domain 1 
114-43-101-84.dynamic.hinet.net
Details Domain 1 
ns4.systeat.com
Details Domain 1 
ns6.systeat.com
Details Domain 1 
c-71-205-242-35.hsd1.mi.comcast.net
Details Domain 1 
ns3.biocruc.com
Details Domain 1 
c-50-130-45-53.hsd1.ms.comcast.net
Details Domain 1 
ns5.systeat.com
Details Domain 1 
cpe-069-132-069-185.carolina.res.rr.com
Details Domain 97 
abuse.ch
Details File 1 
ns4.sys
Details File 1 
ns6.sys
Details File 1 
ns5.sys
Details IPv4 1 
67.177.139.18
Details IPv4 1 
114.43.101.84
Details IPv4 1 
71.205.242.35
Details IPv4 1 
50.130.45.53
Details IPv4 1 
69.132.69.185