corp.tripswithengine[.]comDomain
Reported by 2 independent sources · first reported by Microsoft Security Blog · last reported
Last reported 26 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks“Domain: corp.tripswithengine[.]com (C2 server, port 443)”
-
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations“0x12c: C2 host (corp.tripswithengine[.]com)”
Indicators reported together
named in the same reports- e842dd7642c8e04b…fe7800ba382ein 2 reports
- 9cb68f986043a576…ed1c13f077efin 2 reports
- c82520eb03c08422…a96afe71ef77in 2 reports
- hxxps://winsparkle[.]org/in 1 report
- winsparkle[.]orgin 1 report
- hxxps://poedit[.]com/in 1 report
- poedit[.]comin 1 report
Copy these 7 indicators · defanged
Thanks — we review every report.