c2.powwowski[.]comDomain
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 4 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Technical Analysis of MLTBackdoor“…comDGA domain also used in the distribution campaign.carrolc.comMLTBackdoor C2.cwrtwright.comMLTBackdoor C2.thomphon.comMLTBackdoor C2.powwowski[.]com/payloads/update.zipMLTBackdoor update URL.”
Indicators reported together
named in the same reports- capabilities[.]inin 1 report
- rs2y15sungu[.]comin 1 report
- cwrtwright[.]comin 1 report
- machine[.]lsin 1 report
- types[.]asin 1 report
- hxxps://rs2y15sungu[.]com/d&pushdin 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.