← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Fake Browser Updates Lead to BOINC Volunteer Computing Software | Huntress
WHITE Armature_TIP 2025-02-22 Modified: 2025-03-24
18
IOCs
MEDIUM VOLUME
boincasyncratpowershellhuntressjulycommandsocgholishttpsboinc softwarefilejunefakeupdatesratsscoredownloadinstallerfebruarypersistenceshellmozilla
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (18)
All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
CVE CVE-2024-1708 — 2025-02-22
CVE CVE-2024-1709 — 2025-02-22
FileHash-MD5 760f00e30887017cdea9809fd1c38e52 MD5 of 91e405e8a527023fb8696624e70498ae83660fe6757cef4871ce9bcc659264d3 2025-02-22
FileHash-SHA1 b09271e96ff73b86bd54489fbae1c224369a8bc8 SHA1 of 91e405e8a527023fb8696624e70498ae83660fe6757cef4871ce9bcc659264d3 2025-02-22
FileHash-SHA256 01a8aeb0b350a1325c86c69722affd410ff886881a405743e1adb23538eff119 — 2025-02-22
FileHash-SHA256 380bd5f097b8501618cf8b312d68e97b3220c31172f82973fce3084157caa15e — 2025-02-22
FileHash-SHA256 4716011ca9325480069bffeb2bbe0629fec6e5f69746f2e47f0a6894f2858c0b — 2025-02-22
FileHash-SHA256 91e405e8a527023fb8696624e70498ae83660fe6757cef4871ce9bcc659264d3 — 2025-02-22
FileHash-SHA256 c5bfe4ddcf576b432f4e6ccce10dd3d219ee5f54497e0cc903671783924414a6 — 2025-02-22
URL http://216.245.184.105/1.php?s=boicn| — 2025-02-22
URL http://rzegzwre.top/f23.svg — 2025-02-22
domain ga1yo3wu78v48hh.top — 2025-02-22
domain klmnnilmahlkcje.top — 2025-02-22
domain rosetta.cn — 2025-02-22
domain rosetta.top — 2025-02-22
domain rosettahome.cn — 2025-02-22
domain rosettahome.top — 2025-02-22
domain rzegzwre.top — 2025-02-22
References (1)
↗ https://www.huntress.com/blog/fake-browser-updates-lead-to-boinc-volunteer-computing-software