server[.]itDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 9 years ago
What the reports say
1 report, newest first · the exact sentence from each-
LAZARUS ARISEN“…er module includes debugging symbols and strings containing Russian words in descriptions of commands received by malware from the C&C server[.]It’s worth noting that “Russian commands” received from the server are not typical for a Russian native speaker, and in the case of the «p…”
Indicators reported together
named in the same reports- 210.52.109[.]22in 1 report
- 175.45.178[.]222in 1 report
- 175.45.178[.]19in 1 report
- 175.45.178[.]97in 1 report
- cnvb.gob[.]mxin 1 report
- brou.com[.]uyin 1 report
- hxxp://softether[.]net/in 1 report
- softether[.]netin 1 report
Copy these 8 indicators · defanged
Thanks — we review every report.