banqueislamik.ddrive[.]onlineDomain
Reported by 2 independent sources · first reported by Group-IB · last reported
Last reported 3 years ago
What the reports say
3 reports, newest first · the exact sentence from each-
NETWIRE Dynamic Configuration Extraction“| banqueislamik.ddrive[.]online | domain-name | NETWIRE RAT C2 |”
-
Armés et dangereux : une soif d’argent inextinguible L’APT OPERA1ER en Afrique“banqueislamik.ddrive[.]online”
-
Financially motivated, dangerously activated: OPERA1ER APT in Africa“banqueislamik.ddrive[.]online”
Indicators reported together
named in the same reports- 52c66274994172447b21054744cc5b69in 2 reports
- files.ddrive[.]onlinein 2 reports
- 20.91.192[.]253in 2 reports
- 188.126.90[.]14in 2 reports
- 178.73.192[.]17in 2 reports
- 46.246.84[.]17in 2 reports
- 46.246.84[.]21in 2 reports
- 43.205.33[.]202in 2 reports
- 46.246.84[.]74in 2 reports
- 72.11.142[.]240in 2 reports
- 657a78dcd2c190f00b2f4ef745dd2cddin 2 reports
- 2707299e9ec7fb21…4d74865cf5a3in 2 reports
- 17e0b8fe9acfd177…f051f7e0f91fin 2 reports
- ac85af8395d1b97a…ce119e3c4955in 2 reports
- 139.28.38[.]235in 1 report
- 149.102.132[.]253in 1 report
- 184.75.221[.]115in 1 report
- 185.136.165[.]182in 1 report
- 185.140.53[.]139in 1 report
- 185.140.53[.]144in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.