mh-nexus[.]deDomain

Reported by 1 independent source · first reported 4 May 2023 by Elastic Security Labs · last reported 4 May 2023

Last reported 3 years ago

What the reports say

1 report, newest first · the exact sentence from each

“hxxps://mh-nexus[.]de/en/hxd/”

Elastic Security LabsVendor4 May 2023
Unpacking ICEDID

Indicators reported together

named in the same reports

54d064799115f302…c532b53e855fin 1 report
alishaskainz[.]comin 1 report
villageskaier[.]comin 1 report
hxxps://securityintelligence[.]com/new-banking-trojan-icedid-discovered-by-ibm-x-force-research/in 1 report
hxxps://www.justice[.]gov/opa/pr/emotet-botnet-disrupted-international-cyber-operationin 1 report
hxxps://malpedia.caad.fkie.fraunhofer[.]de/details/win.darkvncin 1 report
hxxps://www.cybereason[.]com/blog/threat-analysis-report-all-paths-lead-to-cobalt-strike-icedid-emotet-and-qbotin 1 report
hxxps://github[.]com/hasherezade/funky_malware_formats/blob/f1cacba4ee347601dceacda04e4de8c699971d29/iced_id_parser/iceid_to_pe.cppin 1 report
hxxps://mh-nexus[.]de/en/hxd/in 1 report
hxxps://hex-rays[.]com/IDA-pro/in 1 report
hex-rays[.]comin 1 report

Copy these 11 indicators · defanged

11 indicators, defanged, one per line

54d064799115f302a66220b3d0920c1158608a5ba76277666c4ac532b53e855f
alishaskainz[.]com
villageskaier[.]com
hxxps://securityintelligence[.]com/new-banking-trojan-icedid-discovered-by-ibm-x-force-research/
hxxps://www.justice[.]gov/opa/pr/emotet-botnet-disrupted-international-cyber-operation
hxxps://malpedia.caad.fkie.fraunhofer[.]de/details/win.darkvnc
hxxps://www.cybereason[.]com/blog/threat-analysis-report-all-paths-lead-to-cobalt-strike-icedid-emotet-and-qbot
hxxps://github[.]com/hasherezade/funky_malware_formats/blob/f1cacba4ee347601dceacda04e4de8c699971d29/iced_id_parser/iceid_to_pe.cpp
hxxps://mh-nexus[.]de/en/hxd/
hxxps://hex-rays[.]com/IDA-pro/
hex-rays[.]com

Thanks — we review every report.

Report a wrong value