types[.]asDomain
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 4 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Technical Analysis of MLTBackdoor“…r -> Client14rename command.Server -> Client15mkdir command.Client -> Server16BOF stdout.Table 6: MLTBackdoor protocol message types[.]As mentioned above, MLTBackdoor uses ECDH to generate a shared secret that is used as an AES session key.”
Indicators reported together
named in the same reports- capabilities[.]inin 1 report
- rs2y15sungu[.]comin 1 report
- cwrtwright[.]comin 1 report
- machine[.]lsin 1 report
- c2.powwowski[.]comin 1 report
- hxxps://rs2y15sungu[.]com/d&pushdin 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.