8e8a88f8fc968996eed0d7ddd.6ceca998199c18f8d968889898896899789978997.westurn[.]inDomain
Reported by 1 independent source · first reported by Fortinet Threat Research · last reported
Last reported 3 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Inside a TrickBot Variant Using DNS Tunneling for C2“…EAF2EDF6E994FC8 1F5FF81F3EDE6EE8F8B808B898997FF8EFF8BFF8D818B.FF8AFBFA8F8A8D8CF88D8DFC8DF88FFD8F8D8E 8E8A88F8FC968996EED0D7DDD.6CECA998199C18F8D968889898896899789978997.westurn[.]in”
Indicators reported together
named in the same reports- westurn[.]inin 1 report
- f7f2f482f3bc6345a44e4a6d647731aein 1 report
- df527a5c2fbde438…888c7d504c98in 1 report
- 6c677eb2b3ffd288…c440962346f4in 1 report
- 105f652e6b8f31c3…a1fcbb321421in 1 report
- 33c331ededbf8ee9…6aacff458cf5in 1 report
- 3b19a82e1354ac14…08e45024c23din 1 report
- bf80245ba792992f…a29d107c8d3bin 1 report
Copy these 8 indicators · defanged
Thanks — we review every report.