microsoft-cloud13.co[.]zaDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 5 years ago
What the reports say
1 report, newest first · the exact sentence from each-
The footprints of Raccoon“…e “My_Statement_1953.xlsm” (SHA1: 618C894C06633E3D7ADD228531F6E775A180A7F7) sends a request to download the stealer file hxxp://microsoft-cloud13.co[.]za/msofficeupdate.exe.”
Indicators reported together
named in the same reports- co[.]zain 1 report
- documents-cloud-server.co[.]zain 1 report
- b1799345152f0f11…a1867d64e119in 1 report
- hxxp://cloudupdate.co[.]za/documents/msofficeupdate.exein 1 report
- cloudupdate.co[.]zain 1 report
- f3498ba783b9c8c8…d2ff189615d9in 1 report
- badlandsparks[.]comin 1 report
- 185.244.149[.]100in 1 report
- 13b7afe8ee87977a…ca7efd62b9b6in 1 report
- 596a3cb4d82e6ab4…14b0f7bd14afin 1 report
- gineuter[.]infoin 1 report
- fastandprettycleaner[.]hkin 1 report
- c2f8d217877b1a28…5212f8dc2335in 1 report
- hxxp://download-plugin.co[.]za/documents/msofficeupdate.exein 1 report
- download-plugin.co[.]zain 1 report
- 430a406f2134b489…da11a172a7e1in 1 report
- hxxp://msupdater.co[.]za/documents/msofficeupdate.exein 1 report
- msupdater.co[.]zain 1 report
- 160.119.253[.]53in 1 report
- hxxp://www.documents-cloud-server.co[.]za/file_d/adobe-reader-update-10.21.01.exein 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.