cwrtwright[.]comDomain
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 4 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Technical Analysis of MLTBackdoor“…based strings constructed in two separate functions and concatenated together.Taken together, these routines construct the full cwrtwright[.]com C2 domain.”
Indicators reported together
named in the same reports- capabilities[.]inin 1 report
- rs2y15sungu[.]comin 1 report
- machine[.]lsin 1 report
- types[.]asin 1 report
- c2.powwowski[.]comin 1 report
- hxxps://rs2y15sungu[.]com/d&pushdin 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.