← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Threat Intel Report - W48-2024
WHITE aa00643640@techmahindra.com 2024-12-02 Modified: 2025-01-01
493
IOCs
HIGH VOLUME
This is a cyber-advisory document, presenting the compiled cyber threat intelligence sourced from various channels and tools. These are weekly base recommendations to all IT Administrators and CISOs to take corrective actions to upgrade their security infrastructure against newly identified threats and attacks in this week. Security is a continuous process, and it has to be reviewed and audited on a continuous manner through manual or automated tools. These details may be used as an additional layer to verify the current security posture of an organization against latest cyber trends.
mozibrazilchinarussiagermanybulgariamozi linkturkeysingaporeindonesiastealcamadeyredline stealerasyncratpanama
Indicators of Compromise (294 / 493 total)
All domain URL FileHash-MD5 FileHash-SHA1 FileHash-SHA256 hostname
TYPEINDICATORDESCRIPTIONCREATED
URL http://185.215.113.209/Fru7Nk9/Plugins/clip64.dll — 2024-12-02
URL http://aloowforest.xyz/c2sock — 2024-12-02
URL http://ierinapu.xyz/ 855bb50e73e6b2d1c6d6d69ee436c9dfcc5b390a49d50119f8f2eea677bcaefd 2024-12-02
URL http://104.219.234.170:16383/ — 2024-12-02
URL http://104.245.33.157/99210de056092a58.php — 2024-12-02
URL http://109.107.177.164/ — 2024-12-02
URL http://109.107.181.33/de4846fc29f26952.php — 2024-12-02
URL http://110.24.36.38:41293/Mozi.a — 2024-12-02
URL http://111.118.40.26:2595/Mozi.m — 2024-12-02
URL http://112.240.139.185:51528/bin.sh — 2024-12-02
URL http://112.240.139.185:51528/i — 2024-12-02
URL http://113.228.155.43:35446/i — 2024-12-02
URL http://113.229.33.196:46034/bin.sh — 2024-12-02
URL http://113.229.33.196:46034/i — 2024-12-02
URL http://113.231.196.144:56829/i — 2024-12-02
URL http://114.238.62.225:39356/bin.sh — 2024-12-02
URL http://114.238.62.225:39356/i — 2024-12-02
URL http://115.51.47.126:46485/i — 2024-12-02
URL http://115.55.190.3:40401/i — 2024-12-02
URL http://115.55.98.114:54610/bin.sh — 2024-12-02
URL http://115.55.98.114:54610/i — 2024-12-02
URL http://115.57.28.30:52638/Mozi.m — 2024-12-02
URL http://115.58.95.78:35101/i — 2024-12-02
URL http://115.62.42.163:32877/bin.sh — 2024-12-02
URL http://116.138.125.117:43086/i — 2024-12-02
URL http://116.138.21.108:57828/bin.sh — 2024-12-02
URL http://116.139.73.107:50138/i — 2024-12-02
URL http://116.53.54.49:36260/bin.sh — 2024-12-02
URL http://116.53.54.49:36260/i — 2024-12-02
URL http://117.192.38.207:43502/bin.sh — 2024-12-02
URL http://117.195.89.81:36200/Mozi.m — 2024-12-02
URL http://117.198.11.170:60183/bin.sh — 2024-12-02
URL http://117.198.13.166:34824/i — 2024-12-02
URL http://117.198.13.65:48191/bin.sh — 2024-12-02
URL http://117.205.57.126:50603/Mozi.m — 2024-12-02
URL http://117.206.21.148:36034/Mozi.m — 2024-12-02
URL http://117.208.210.132:47746/Mozi.m — 2024-12-02
URL http://117.209.18.55:36014/i — 2024-12-02
URL http://117.209.30.132:41847/Mozi.m — 2024-12-02
URL http://117.209.30.91:44556/Mozi.m — 2024-12-02
URL http://117.209.32.71:54345/bin.sh — 2024-12-02
URL http://117.209.46.147:47144/bin.sh — 2024-12-02
URL http://117.209.82.91:53009/Mozi.m — 2024-12-02
URL http://117.209.90.123:55032/bin.sh — 2024-12-02
URL http://117.209.90.63:51579/Mozi.m — 2024-12-02
URL http://117.211.210.229:60856/bin.sh — 2024-12-02
URL http://117.211.210.229:60856/i — 2024-12-02
URL http://117.211.41.72:52855/bin.sh — 2024-12-02
URL http://117.213.245.176:52149/Mozi.m — 2024-12-02
URL http://117.216.148.203:49599/bin.sh — 2024-12-02
URL http://117.220.56.6:34201/bin.sh — 2024-12-02
URL http://117.221.48.91:46581/Mozi.m — 2024-12-02
URL http://117.223.8.190:34276/bin.sh — 2024-12-02
URL http://117.235.107.164:58959/bin.sh — 2024-12-02
URL http://117.235.107.164:58959/i — 2024-12-02
URL http://117.235.119.90:54761/bin.sh — 2024-12-02
URL http://117.235.119.90:54761/i — 2024-12-02
URL http://117.235.120.19:58300/i — 2024-12-02
URL http://117.235.127.72:48815/bin.sh — 2024-12-02
URL http://117.235.42.87:57692/Mozi.m — 2024-12-02
URL http://117.242.235.237:38791/bin.sh — 2024-12-02
URL http://117.252.162.98:56081/bin.sh — 2024-12-02
URL http://117.252.193.75:45863/Mozi.a — 2024-12-02
URL http://117.255.184.114:56887/Mozi.m — 2024-12-02
URL http://117.255.99.92:44317/i — 2024-12-02
URL http://117.80.245.65:39567/bin.sh — 2024-12-02
URL http://117.81.111.63:36323/bin.sh — 2024-12-02
URL http://119.115.67.76:42359/bin.sh — 2024-12-02
URL http://119.186.197.139:41846/i — 2024-12-02
URL http://119.191.178.6:33625/Mozi.a — 2024-12-02
URL http://121.228.193.80:59707/bin.sh — 2024-12-02
URL http://121.228.193.80:59707/i — 2024-12-02
URL http://121.231.200.130:49194/Mozi.a — 2024-12-02
URL http://121.239.193.42:42649/i — 2024-12-02
URL http://123.185.49.170:37545/i — 2024-12-02
URL http://123.9.45.233:41450/bin.sh — 2024-12-02
URL http://124.131.105.42:48403/i — 2024-12-02
URL http://124.94.141.72:55255/i — 2024-12-02
URL http://125.41.224.48:47067/i — 2024-12-02
URL http://125.41.226.178:47067/i — 2024-12-02
URL http://136.175.8.52:29509/ — 2024-12-02
URL http://149.255.35.132/e50ac16f7b113954.php — 2024-12-02
URL http://154.216.17.126/aaa — 2024-12-02
URL http://154.216.17.126/f5 — 2024-12-02
URL http://154.216.17.126/gmpsl — 2024-12-02
URL http://154.216.17.126/hmips — 2024-12-02
URL http://154.216.17.126/irz — 2024-12-02
URL http://154.216.17.126/jaws — 2024-12-02
URL http://154.216.17.126/lll — 2024-12-02
URL http://154.216.17.126/mass.sh — 2024-12-02
URL http://154.216.17.126/mpsl — 2024-12-02
URL http://154.216.17.126/multi — 2024-12-02
URL http://154.216.17.126/r.sh — 2024-12-02
URL http://154.216.17.126/sh4 — 2024-12-02
URL http://154.216.17.126/w.sh — 2024-12-02
URL http://154.216.17.126/weed — 2024-12-02
URL http://154.216.17.126/xaxa — 2024-12-02
URL http://171.83.242.48:48673/i — 2024-12-02
URL http://176.124.198.17/1da263bff25c8346.php — 2024-12-02
URL http://177.202.112.255 — 2024-12-02
URL http://182.112.5.121:47548/bin.sh — 2024-12-02
URL http://182.114.33.61:48433/bin.sh — 2024-12-02
URL http://182.114.33.61:48433/i — 2024-12-02
URL http://182.116.85.92:54519/bin.sh — 2024-12-02
URL http://182.119.237.49:44795/bin.sh — 2024-12-02
URL http://182.120.59.232:36263/Mozi.m — 2024-12-02
URL http://182.121.54.240:39203/bin.sh — 2024-12-02
URL http://182.121.54.240:39203/i — 2024-12-02
URL http://182.126.118.167:47658/i — 2024-12-02
URL http://182.127.177.17:46837/bin.sh — 2024-12-02
URL http://185.118.165.94:15838/ — 2024-12-02
URL http://185.17.40.133/ba91ff2f6a996325.php — 2024-12-02
URL http://185.172.128.24/40d570f44e84a44.php — 2024-12-02
URL http://185.172.128.24/40d570f44e84a454.php — 2024-12-02
URL http://185.172.128.79/3886d22766914c4.php — 2024-12-02
URL http://185.172.128.79/3886d2276f6914c4.php — 2024-12-02
URL http://185.215.113.16/Jo89Ku7d/index.php — 2024-12-02
URL http://185.215.113.16/luma/random.exe — 2024-12-02
URL http://185.215.113.16/off/def.exe 0423970d7820efa63375494046b8513d90367c063481675b5062af7e4f462ab2 2024-12-02
URL http://185.215.113.16/steam/random.exe d9798bda5b0cd389f0b0f184ded085cded77a8652d96be4054789452b2a04ca5 2024-12-02
URL http://185.215.113.209/Fru7Nk9/index.php — 2024-12-02
URL http://185.215.113.43/Zu7JuNko/index.php 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068 2024-12-02
URL http://185.222.58.240:55615/ — 2024-12-02
URL http://185.222.58.241:55615/ — 2024-12-02
URL http://185.222.58.80:55615/ — 2024-12-02
URL http://185.7.78.49/1.ps1 — 2024-12-02
URL http://185.99.133.246/c2sock — 2024-12-02
URL http://190.230.246.255 — 2024-12-02
URL http://193.201.9.240/live/games/Plugins/cred64.dll — 2024-12-02
URL http://193.201.9.240/live/games/index.php — 2024-12-02
URL http://193.233.20.25/buH5N004d/Plugins/clip64.dll b0308039b578ab07a5710745e5895b90a88133c669ca14a8f1943845387d223a 2024-12-02
URL http://193.233.20.25/buH5N004d/Plugins/cred64.dll — 2024-12-02
URL http://193.233.20.25/buH5N004d/index.php — 2024-12-02
URL http://193.233.20.36/joomla/Plugins/clip64.dll 8b6af7cc4fc3bcb4172a2bf4a7727175ba48980bcc808e56ce7744d28af60a8f 2024-12-02
URL http://193.233.20.36/joomla/Plugins/cred64.dll — 2024-12-02
URL http://193.233.20.36/joomla/index.php — 2024-12-02
URL http://193.3.19.154/store/games/Plugins/clip64.dll 675771ae0ef1ba5c7fdde82f950461c2c4487e56b3fc41f5c544b73c8b33f10d 2024-12-02
URL http://193.3.19.154/store/games/Plugins/cred64.dll 3c8cc37a98346bd0123b35e5ccd87bd07d69914dae04f8b49f61c150d96e9d1f 2024-12-02
URL http://193.3.19.154/store/games/index.php — 2024-12-02
URL http://193.70.111.186:13484/ — 2024-12-02
URL http://193.84.71.119/nice/Satan.arc — 2024-12-02
URL http://193.84.71.119/nice/Satan.arm — 2024-12-02
URL http://193.84.71.119/nice/Satan.arm5 — 2024-12-02
URL http://193.84.71.119/nice/Satan.arm6 — 2024-12-02
URL http://193.84.71.119/nice/Satan.arm7 — 2024-12-02
URL http://193.84.71.119/nice/Satan.i686 — 2024-12-02
URL http://193.84.71.119/nice/Satan.m68k — 2024-12-02
URL http://193.84.71.119/nice/Satan.mips — 2024-12-02
URL http://193.84.71.119/nice/Satan.mpsl — 2024-12-02
URL http://193.84.71.119/nice/Satan.ppc — 2024-12-02
URL http://193.84.71.119/nice/Satan.sh4 — 2024-12-02
URL http://193.84.71.119/nice/Satan.spc — 2024-12-02
URL http://193.84.71.119/nice/Satan.x86 — 2024-12-02
URL http://193.84.71.119/nice/Satan.x86_64 — 2024-12-02
URL http://193.84.71.119/ohshit.sh — 2024-12-02
URL http://194.90.142.157/docx/docx001.docx — 2024-12-02
URL http://194.90.142.157/docx/docx004.docx — 2024-12-02
URL http://194.90.142.157/docx/docx006.docx — 2024-12-02
URL http://194.90.142.157/docx/docx010.docx — 2024-12-02
URL http://194.90.142.157/pdf/pdf002.pdf 01dff889a749e915d13e5a609821ec9deba20c88247f5e02598fd9b3ca086fc1 2024-12-02
URL http://194.90.142.157/pdf/pdf003.pdf 02856920a3e341b55ca6b6e78023ae9085b0842247e8ad83cd9ccc18dff66fa0 2024-12-02
URL http://194.90.142.157/pdf/pdf004.pdf 0402f4b721dc1d0174b20a81f5a84b284066a9d2672a0dd46f68e3c9acdbf7a9 2024-12-02
URL http://194.90.142.157/pdf/pdf010.pdf 1a3713ff48e9c59946870e4e3a7b26e666c45f7a8398e43c8a160cbc8db4e964 2024-12-02
URL http://194.90.142.157/xlsx/xlsx001.xlsx — 2024-12-02
URL http://194.90.142.157/xlsx/xlsx002.xlsx — 2024-12-02
URL http://194.90.142.157/xlsx/xlsx003.xlsx — 2024-12-02
URL http://194.90.142.157/xlsx/xlsx005.xlsx — 2024-12-02
URL http://194.90.142.157/zip/zip005.zip — 2024-12-02
URL http://194.90.142.157/zip/zip009.zip — 2024-12-02
URL http://194.90.142.157/zip/zip010.zip — 2024-12-02
URL http://195.123.226.91/c2sock — 2024-12-02
URL http://195.123.227.138/c2sock — 2024-12-02
URL http://196.189.39.163:52997/i — 2024-12-02
URL http://20.205.247.255 — 2024-12-02
URL http://209.141.39.46/dbg — 2024-12-02
URL http://212.113.119.255/ — 2024-12-02
URL http://213.242.54.178:58812/i — 2024-12-02
URL http://218.29.9.196:40708/bin.sh — 2024-12-02
URL http://218.29.9.196:40708/i — 2024-12-02
URL http://218.60.178.142:59469/i — 2024-12-02
URL http://220.202.88.153:41062/i — 2024-12-02
URL http://221.0.120.255:35113/i — 2024-12-02
URL http://221.15.49.179:42796/bin.sh — 2024-12-02
URL http://222.139.52.205:38397/bin.sh — 2024-12-02
URL http://222.141.61.13:37031/i — 2024-12-02
URL http://222.188.235.21:43994/Mozi.m — 2024-12-02
URL http://27.202.180.69:33886/i — 2024-12-02
URL http://27.76.182.225:39126/.i — 2024-12-02
URL http://2flowers-my.xyz/c2sock — 2024-12-02
URL http://36.49.34.77:20182/.i — 2024-12-02
URL http://36.93.32.243:36937/Mozi.m — 2024-12-02
URL http://37.255.202.86:37166/i — 2024-12-02
URL http://39.90.148.35:56365/bin.sh — 2024-12-02
URL http://39.90.149.11:34984/Mozi.m — 2024-12-02
URL http://42.224.64.64:47646/bin.sh — 2024-12-02
URL http://42.224.64.64:47646/i — 2024-12-02
URL http://42.228.102.161:54412/bin.sh — 2024-12-02
URL http://42.228.217.72:33526/bin.sh — 2024-12-02
URL http://42.228.33.60:42494/bin.sh — 2024-12-02
URL http://42.228.33.60:42494/i — 2024-12-02
URL http://42.231.90.250:42438/bin.sh — 2024-12-02
URL http://42.235.50.235:37361/i — 2024-12-02
URL http://42.5.15.23:53274/bin.sh — 2024-12-02
URL http://42.5.15.23:53274/i — 2024-12-02
URL http://42.85.134.174:46606/Mozi.m — 2024-12-02
URL http://45.125.66.203/ah — 2024-12-02
URL http://45.125.66.203/buf — 2024-12-02
URL http://45.125.66.203/chomp — 2024-12-02
URL http://45.125.66.203/cn — 2024-12-02
URL http://45.125.66.203/curl.sh — 2024-12-02
URL http://45.125.66.203/ftpget.sh — 2024-12-02
URL http://45.125.66.203/n — 2024-12-02
URL http://45.125.66.203/n3881.sh — 2024-12-02
URL http://45.125.66.203/pdvr — 2024-12-02
URL http://45.125.66.203/phi.sh — 2024-12-02
URL http://45.125.66.203/t — 2024-12-02
URL http://45.125.66.203/tftp.sh — 2024-12-02
URL http://45.125.66.203/we — 2024-12-02
URL http://45.125.66.203/wert — 2024-12-02
URL http://45.125.66.203/wget.sh — 2024-12-02
URL http://45.125.66.203/x — 2024-12-02
URL http://45.125.66.203/zxc.sh — 2024-12-02
URL http://45.137.22.126:55615/ — 2024-12-02
URL http://45.15.157.217/cbb264a91564bd6c.php — 2024-12-02
URL http://45.87.153.135/5d4f090c730016b1.php — 2024-12-02
URL http://46.71.230.252:53103/i — 2024-12-02
URL http://47.237.118.0 — 2024-12-02
URL http://5.42.64.41/ — 2024-12-02
URL http://5.42.64.41/40d570f44e84a454.php — 2024-12-02
URL http://5.42.65.54/4ea69013b92ecb73.php — 2024-12-02
URL http://5.42.66.36/1fa9cf51b66b1f7e.php — 2024-12-02
URL http://5.42.66.57/3886d2276f6914c4.php — 2024-12-02
URL http://5.42.66.58/3886d2276f6914c4.php — 2024-12-02
URL http://5.42.92.211/ — 2024-12-02
URL http://50.114.242.21:6677/IRemotePanel — 2024-12-02
URL http://50.116.53.64:3214/ — 2024-12-02
URL http://51.254.69.209:48987/ — 2024-12-02
URL http://58.216.76.131:36567/Mozi.m — 2024-12-02
URL http://59.182.255.179:59961/bin.sh — 2024-12-02
URL http://59.182.89.188:40517/bin.sh — 2024-12-02
URL http://59.182.95.68:40122/i — 2024-12-02
URL http://59.88.14.7:52116/i — 2024-12-02
URL http://59.88.240.251:47399/bin.sh — 2024-12-02
URL http://59.88.240.251:47399/i — 2024-12-02
URL http://59.88.250.72:33012/Mozi.m — 2024-12-02
URL http://59.89.1.212:49748/bin.sh — 2024-12-02
URL http://59.89.201.81:60427/i — 2024-12-02
URL http://59.92.83.255:32947/bin.sh — 2024-12-02
URL http://59.92.83.255:32947/i — 2024-12-02
URL http://59.98.2.3:40745/Mozi.m — 2024-12-02
URL http://60.18.63.186:39474/bin.sh — 2024-12-02
URL http://60.188.57.0 — 2024-12-02
URL http://60.23.188.147:44847/i — 2024-12-02
URL http://61.0.186.1:33907/Mozi.m — 2024-12-02
URL http://61.137.204.205:38513/bin.sh — 2024-12-02
URL http://61.3.105.204:46663/i — 2024-12-02
URL http://61.52.55.113:55354/i — 2024-12-02
URL http://62.204.41.5/ 38ffd4972ae513a0c79a8be4573403edcd709f0f572105362b08ff50cf6de521 2024-12-02
URL http://77.232.41.42:37097/ — 2024-12-02
URL http://77.91.76.36/3886d2276f6914c4.php — 2024-12-02
URL http://82.117.255.80/c2sock f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5 2024-12-02
URL http://84.38.132.100:29934/ — 2024-12-02
URL http://87.120.127.223:42128/ — 2024-12-02
URL http://89.110.95.189:45697/ — 2024-12-02
URL http://95.216.72.17/cdc8cb4ba5f9dfaa.php — 2024-12-02
URL http://95.245.74.56:45843/bin.sh — 2024-12-02
URL http://agustfreeday-my.xyz/c2sock — 2024-12-02
URL http://bestmetrys.zapto.org:1019/ — 2024-12-02
URL http://broad.sz.gd.dynamic.163data.com.cn — 2024-12-02
URL http://clonecloud-my.xyz/c2sock — 2024-12-02
URL http://crazypictures.xyz/c2sock — 2024-12-02
URL http://dynamic.ttnet.com.tr — 2024-12-02
URL http://dynamic.veloxsp.net.br — 2024-12-02
URL http://flowers-my.xyz/c2sock — 2024-12-02
URL http://gg123213123sadas-38622.portmap.host/ — 2024-12-02
URL http://gservice-node.io/c2sock — 2024-12-02
URL http://gstatic-node.io/c2sock — 2024-12-02
URL http://many-verses.xyz/c2sock — 2024-12-02
URL http://memorialwords.xyz:6666/ — 2024-12-02
URL http://mottanet.net.br — 2024-12-02
URL http://nasdnasnd-55496.portmap.host/ — 2024-12-02
URL http://nasdnasnd-55496.portmap.host:55496/ — 2024-12-02
URL http://rev.vexpert.com.br — 2024-12-02
URL http://skicloud-my.xyz/c2sock — 2024-12-02
URL http://solopodvip-my.xyz/c2sock — 2024-12-02
URL http://speedtestip.xyz/c2sock — 2024-12-02
URL http://static.cloudzy.com — 2024-12-02
URL http://static.iradionet.com.br — 2024-12-02
URL http://stoppublick.xyz/c2sock — 2024-12-02
URL http://vipcloud-my.xyz/c2sock — 2024-12-02
URL http://wananchi.com — 2024-12-02
URL http://worldofpoetry.xyz/c2sock — 2024-12-02
URL http://xj.55555com.com/xj/%E6%97%B6%E6%97%B6%E5 — 2024-12-02
URL https://ywp.guide.borden-carleton.ca/orderReview — 2024-12-02
References (2)
↗ https://myip.ms/browse/blacklist/Blacklist_IP_Blacklist_IP_Addresses_Live_Database_Real-time ↗ https://any.run/malware-trends/