Pulse Detail — Threat Intelligence

PULSE NAME

Twitter Feed - drb_ra - 08-06-2023

WHITE CyberHunterAutoFeed 2023-06-08 Modified: 2023-07-08

IOCs

HIGH VOLUME

↓ CSV ↓ JSON

CobaltStrike Qakbot

Indicators of Compromise (73)

All URL

TYPE	INDICATOR	DESCRIPTION	CREATED
URL	https://ns4.digitelela.com/search	—	2023-06-08
URL	https://ns.qaxno1.ml/poll	—	2023-06-08
URL	https://ns2.cdnmax.info/pixel	—	2023-06-08
URL	https://vigorouseuclid.zscaler.skytapdns.com/visit.js	—	2023-06-08
URL	https://dnsproxy.blueseaedu.com/maps/overlaybfpr	—	2023-06-08
URL	https://dns.antegivi.com/pixel	—	2023-06-08
URL	https://bot1.qianxinsecurity.com/cx	—	2023-06-08
URL	https://asssaaass1.qianxinsecurity.com/fwlink	—	2023-06-08
URL	https://abc1.qianxinsecurity.com/g.pixel	—	2023-06-08
URL	https://ns1.staticjs.xyz/js/view/index.js	—	2023-06-08
URL	https://ns4.kagotsurube.org/jquery-3.3.1.min.js	—	2023-06-08
URL	https://139.9.216.32/owa/	—	2023-06-08
URL	https://139.59.120.61/dpixel	—	2023-06-08
URL	https://39.105.143.177/updates	—	2023-06-08
URL	https://103.42.214.78/jquery-3.3.1.min.js	—	2023-06-08
URL	https://124.222.19.112/cm	—	2023-06-08
URL	https://ask.healthgurues.com/j.ad	—	2023-06-08
URL	https://stop.lycanfinance.com/j.ad	—	2023-06-08
URL	https://master.drobenhealth.com/j.ad	—	2023-06-08
URL	https://ns1.zengjunhe.top/updates	—	2023-06-08
URL	https://ns2.zengjunhe.top/updates	—	2023-06-08
URL	https://primary.dreamwellfarms.com/j.ad	—	2023-06-08
URL	https://recover.healthcarecdn.com/o/dVBxSwCHul2OKAe41CreIrOgSY	—	2023-06-08
URL	https://active.clarusbank.com/j.ad	—	2023-06-08
URL	https://description.bettermoneyhelp.com/owa/W1x7JCcx-jqUmekQl5daTU8WWFHFX-V3Er	—	2023-06-08
URL	https://highway.steelcdn.org/w/index.php	—	2023-06-08
URL	https://alarm.bettermoneyhelp.com/j.ad	—	2023-06-08
URL	https://cross.tradinginhealth.com/j.ad	—	2023-06-08
URL	https://lecture.liveritehealthcare.com/j.ad	—	2023-06-08
URL	https://172.245.180.61/g.pixel	—	2023-06-08
URL	https://124.223.200.131/admin/login	—	2023-06-08
URL	https://101.43.45.243/api/info	—	2023-06-08
URL	https://23.106.130.64/wp06/wp-includes/po.php	—	2023-06-08
URL	https://175.178.113.63	—	2023-06-08
URL	https://agency.baidubet.com/azure/api/v2/userinfo/get	—	2023-06-08
URL	https://60.205.138.64/cx	—	2023-06-08
URL	https://103.143.249.89/g.pixel	—	2023-06-08
URL	https://118.178.133.227/j.ad	—	2023-06-08
URL	https://service-jcetme20-1314507962.nj.apigw.tencentcs.com/api/x	—	2023-06-08
URL	https://121.4.27.161/IE9CompatViewList.xml	—	2023-06-08
URL	https://155.94.135.207/cx	—	2023-06-08
URL	https://193.200.134.170/visit.js	—	2023-06-08
URL	https://43.139.116.197/pixel	—	2023-06-08
URL	https://167.172.185.27/fwlink	—	2023-06-08
URL	https://94.131.98.66/updates.rss	—	2023-06-08
URL	https://104.128.86.138/owa/	—	2023-06-08
URL	https://43.139.180.193/IE9CompatViewList.xml	—	2023-06-08
URL	https://d1672414.azureedge.net/rn	—	2023-06-08
URL	https://43.140.203.115/cm	—	2023-06-08
URL	https://129.211.163.19/load	—	2023-06-08
URL	https://134.209.249.32/__utm.gif	—	2023-06-08
URL	https://47.120.5.215/cx	—	2023-06-08
URL	https://39.104.180.151/dot.gif	—	2023-06-08
URL	https://surplusofer.com/design/query/9X5M3SOE0F	—	2023-06-08
URL	https://43.136.36.91/updates.rss	—	2023-06-08
URL	https://101.35.21.201/dpixel	—	2023-06-08
URL	https://106.53.147.223/match	—	2023-06-08
URL	https://116.62.176.156/api/getit	—	2023-06-08
URL	https://news.komitemedical.com/j.ad	—	2023-06-08
URL	https://success.ehealthsimplified.com/j.ad	—	2023-06-08
URL	https://energy.steelcdn.com/j.ad	—	2023-06-08
URL	https://ns2.alidns1.tk/logo.js	—	2023-06-08
URL	https://ns1.alidns1.tk/logo.js	—	2023-06-08
URL	https://dns.alidns1.tk/csdn-footer.css	—	2023-06-08
URL	https://salt.doctordanm.com/j.ad	—	2023-06-08
URL	https://recommendation.digihealthlocker.com/j.ad	—	2023-06-08
URL	https://block.health-degree.com/j.ad	—	2023-06-08
URL	https://206.189.245.2/multiply/portal/HJ6EDR1B35CV	—	2023-06-08
URL	https://172.93.201.129/Multiply/v8.7/36MCFOMPE5F4	—	2023-06-08
URL	https://tavositaru.co/Multiply/v8.7/36MCFOMPE5F4	—	2023-06-08
URL	https://42.194.197.135/ca	—	2023-06-08
URL	https://scervice.shop/visit.js	—	2023-06-08
URL	https://hommyyy-hjbggphhf5bnfmhu.z01.azurefd.net/safebrowsing/oAX7UR/hCvS3syeaHpeu3IgZr7FUN	—	2023-06-08

References (111)