pesnam.publicvm[.]comDomain

Reported by 1 independent source · first reported 1 Nov 2023 by Elastic Security Labs · last reported 1 Nov 2023

Last reported 2 years ago

What the reports say

1 report, newest first · the exact sentence from each

“On October 14, 2023, 23.254.226.90 was used to register the subdomain, pesnam.publicvm[.]com.”

Elastic Security LabsVendor1 Nov 2023
Elastic catches DPRK passing out KANDYKORN

Indicators reported together

named in the same reports

23.254.226[.]90in 1 report
2360a69e5fd7217e…0234f7762df1in 1 report
discord[.]appin 1 report
5555494485b460f1…b94d01136320in 1 report
hxxps://drive.google[.]com/file/d1KW5nQ8MZccug6Mp4QtKyWLT3HIZzHNIL2in 1 report
192.119.64[.]43in 1 report
bitscrunnch.linkpc[.]netin 1 report
jobintro.linkpc[.]netin 1 report
jobdescription.linkpc[.]netin 1 report
docsenddata.linkpc[.]netin 1 report
docsendinfo.linkpc[.]netin 1 report
datasend.linkpc[.]netin 1 report
exodus.linkpc[.]netin 1 report
bitscrunnch.run[.]placein 1 report
coupang-networks[.]picsin 1 report
group.pro-tokyo[.]topin 1 report
hxxps://github[.]com/Prtofin 1 report
hxxps://github[.]com/wokurksin 1 report
3ea2ead8f3cec030…fe8a6cb59940in 1 report
927b3564c1cf884d…ab7f8af192f6in 1 report

Copy these 20 indicators · defanged

20 indicators, defanged, one per line

23.254.226[.]90
2360a69e5fd7217e977123c81d3dbb60bf4763a9dae6949bc1900234f7762df1
discord[.]app
5555494485b460f1e2343dffaef9b94d01136320
hxxps://drive.google[.]com/file/d1KW5nQ8MZccug6Mp4QtKyWLT3HIZzHNIL2
192.119.64[.]43
bitscrunnch.linkpc[.]net
jobintro.linkpc[.]net
jobdescription.linkpc[.]net
docsenddata.linkpc[.]net
docsendinfo.linkpc[.]net
datasend.linkpc[.]net
exodus.linkpc[.]net
bitscrunnch.run[.]place
coupang-networks[.]pics
group.pro-tokyo[.]top
hxxps://github[.]com/Prtof
hxxps://github[.]com/wokurks
3ea2ead8f3cec030906dcbffe3efd5c5d77d5d375d4a54cca03bfe8a6cb59940
927b3564c1cf884d2a05e1d7bd24362ce8563a1e9b85be776190ab7f8af192f6

Thanks — we review every report.

Report a wrong value