Pulse Detail — Threat Intelligence

PULSE NAME

Twitter Feed - drb_ra - 25-02-2024

WHITE CyberHunterAutoFeed 2024-02-26 Modified: 2024-03-27

IOCs

HIGH VOLUME

↓ CSV ↓ JSON

Qakbot CobaltStrike

Indicators of Compromise (53)

All URL hostname domain

TYPE	INDICATOR	DESCRIPTION	CREATED
URL	http://185.198.57.41:7443	—	2024-02-26
URL	http://35.193.229.206:443	—	2024-02-26
URL	http://78.40.117.84:443	—	2024-02-26
URL	http://167.56.121.249:995	—	2024-02-26
URL	http://71.88.241.194:443	—	2024-02-26
URL	http://77.105.147.157:80	—	2024-02-26
URL	https://20.106.175.213/microcoft-gettask.html	—	2024-02-26
URL	http://20.106.175.213:81	—	2024-02-26
URL	https://111.230.119.183/api/x	—	2024-02-26
URL	http://1.12.36.65:443	—	2024-02-26
URL	http://73.18.108.30:9090	—	2024-02-26
hostname	a.pain.capetown	—	2024-02-26
URL	https://a.pain.capetown/ga.js	—	2024-02-26
URL	http://88.214.25.36:53	—	2024-02-26
URL	https://154.197.98.85/ca	—	2024-02-26
URL	http://154.197.98.85:80	—	2024-02-26
URL	https://43.136.71.208/api/methon/scan	—	2024-02-26
URL	http://43.136.71.208:8085	—	2024-02-26
domain	sonystore.xyz	—	2024-02-26
URL	https://www.sonystore.xyz/jquery-3.3.1.min.js	—	2024-02-26
URL	http://39.98.192.104:8443	—	2024-02-26
domain	baidu12366.xyz	—	2024-02-26
URL	https://www.baidu12366.xyz/jquery-3.3.1.min.js	—	2024-02-26
URL	http://106.54.228.198:8080	—	2024-02-26
URL	https://121.43.58.124/en_US/all.js	—	2024-02-26
URL	http://121.43.58.124:5555	—	2024-02-26
URL	https://45.134.225.245/en_US/all.js	—	2024-02-26
URL	http://45.134.225.245:80	—	2024-02-26
URL	https://106.54.228.198/jquery-3.3.1.min.js	—	2024-02-26
URL	http://106.54.228.198:8081	—	2024-02-26
URL	https://121.43.58.124/dot.gif	—	2024-02-26
URL	http://121.43.58.124:4444	—	2024-02-26
URL	http://185.250.151.246:8443	—	2024-02-26
URL	http://47.98.126.140:10000	—	2024-02-26
URL	http://136.0.3.71:5671	—	2024-02-26
URL	http://165.227.122.136:80	—	2024-02-26
URL	http://20.80.88.247:445	—	2024-02-26
URL	http://2.91.177.204:443	—	2024-02-26
URL	http://154.247.237.145:2078	—	2024-02-26
URL	http://79.107.151.150:995	—	2024-02-26
URL	http://41.96.125.98:443	—	2024-02-26
URL	http://79.137.202.68:80	—	2024-02-26
hostname	o.cirt.pro	—	2024-02-26
URL	https://o.cirt.pro/owa/	—	2024-02-26
URL	http://159.223.220.165:443	—	2024-02-26
domain	microsoftsyst3m.com	—	2024-02-26
URL	https://MicrosoftSyst3m.com/Enable/v9/WDOBLGWR0S	—	2024-02-26
domain	igo0gle.com	—	2024-02-26
URL	https://igo0gle.com/Enable/v9/WDOBLGWR0S	—	2024-02-26
URL	https://88.214.25.235/Enable/v9/WDOBLGWR0S	—	2024-02-26
URL	http://88.214.25.235:80	—	2024-02-26
URL	https://134.209.92.85/owa/	—	2024-02-26
URL	http://159.223.220.165:80	—	2024-02-26

References (31)