xxx.xxx.xxx[.]xxxDomain

Reported by 1 independent source · first reported 2 Jun 2022 by Elastic Security Labs · last reported 2 Jun 2022

Last reported 4 years ago

What the reports say

1 report, newest first · the exact sentence from each

“xxx.xxx.xxx[.]xxx:6881”

Elastic Security LabsVendor2 Jun 2022
Collecting and operationalizing threat data from the Mozi botnet

Indicators reported together

named in the same reports

dht.transmissionbt[.]comin 1 report
832fb4090879c1be…7e03ee687d3bin 1 report
abc.abc.abc[.]abcin 1 report
tactic[.]asin 1 report
hxxps://github[.]com/elastic/examples/tree/master/blog/mozin-aboutin 1 report
hxxps://cujo[.]com/upx-anti-unpacking-techniques-in-iot-malwarein 1 report
cujo[.]comin 1 report
hxxps://vcodispot[.]com/corrupted-upx-packed-elf-repairin 1 report
vcodispot[.]comin 1 report
hxxps://blag.nullteilerfrei[.]de/2019/12/26/upx-packed-elf-binaries-of-the-peer-to-peer-botnet-family-moziin 1 report
blag.nullteilerfrei[.]dein 1 report
hxxps://blog.netlab.360[.]com/mozi-another-botnet-using-dhtin 1 report
hxxps://threatpost[.]com/mozi-botnet-majority-iot-traffic/159337in 1 report

Copy these 13 indicators · defanged

13 indicators, defanged, one per line

dht.transmissionbt[.]com
832fb4090879c1bebe75bea939a9c5724dbf87898febd425f94f7e03ee687d3b
abc.abc.abc[.]abc
tactic[.]as
hxxps://github[.]com/elastic/examples/tree/master/blog/mozin-about
hxxps://cujo[.]com/upx-anti-unpacking-techniques-in-iot-malware
cujo[.]com
hxxps://vcodispot[.]com/corrupted-upx-packed-elf-repair
vcodispot[.]com
hxxps://blag.nullteilerfrei[.]de/2019/12/26/upx-packed-elf-binaries-of-the-peer-to-peer-botnet-family-mozi
blag.nullteilerfrei[.]de
hxxps://blog.netlab.360[.]com/mozi-another-botnet-using-dht
hxxps://threatpost[.]com/mozi-botnet-majority-iot-traffic/159337

Thanks — we review every report.

Report a wrong value