proxyconfigclass[.]hostDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 7 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Gustuff: Weapon of Mass Infection“Connects to ProxyConfigClass[.]host : ProxyConfigClass.commandPort and sends data about the infected device in JSON format:”
Indicators reported together
named in the same reports- records[.]phin 1 report
- ailistiterator[.]nextin 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.