screenai[.]onlineDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 12 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Unmasking MuddyWater’s New Malware Toolkit Driving International Espionage“…s identical macro code, delivers the same payload, and communicates with the same command-and-control (C2) domain as other samples (screenai[.]online).”
Indicators reported together
named in the same reports- 40dead1e1d831076…5af71a9b5e05in 1 report
- 6de859a27ccc7846…6e32780e498ain 1 report
- bed6506f8f528188…c750545292fcin 1 report
- hxxp://159.198.36[.]115:4444/chromium_stealer_user.exein 1 report
- 159.198.36[.]115in 1 report
- 668dd5b6fb06fe30…43d801bf1a1ein 1 report
- 5ec5a2adaa82a983…6ac98bb91839in 1 report
- 1883db6de22d98ed…f0e8d40c4c56in 1 report
- 3ac8283916547c50…6a5b6ae255e3in 1 report
- 76fa8dca768b64ae…561e48e39c75in 1 report
- 3d6f69cc0330b302…ce4a1a3932cain 1 report
Copy these 11 indicators · defanged
Thanks — we review every report.