ypjkevsbsdhj.zhivachkapro[.]comDomain
Reported by 1 independent source · first reported by Sophos X-Ops · last reported
Last reported 2 months ago
What the reports say
1 report, newest first · the exact sentence from each-
deno-case-studies“…mote content in memory, which subsequently led to the retrieval and execution of a malicious MSI payload from URL “https[://]ypjkevsbsdhj.zhivachkapro[.]com”.”
Indicators reported together
named in the same reports- sendtokenscf[.]comin 1 report
- koromoblog[.]comin 1 report
- 74260ef8c4406920…d031b42890a0in 1 report
- 26b2cafb71b1407b8e01649548cf56aain 1 report
- readme-ov-filegithub[.]comin 1 report
- dl.deno[.]landin 1 report
- 2541d96d1d071f87…78fcc4a3dca2in 1 report
- b0af82de672d81f3…19a1996931a0in 1 report
- data[.]cabin 1 report
- crahdhduf[.]comin 1 report
- 144.31.2[.]161in 1 report
- serialmenot[.]comin 1 report
Copy these 12 indicators · defanged
Thanks — we review every report.