4435fcd6862921092614dbeaa880e4192352984686ebcd98f0ba13ee8e226ef9SHA-256 hash
Reported by 2 independent sources · first reported by Rapid7 · last reported
Last reported 22 days agoFeeds last saw it 21 days ago
What the reports say
1 report, newest first · the exact sentence from each-
SMTP is the key: BPFDoor and AVERAT hitting the network edge“…he same switch-case and iptables NAT-redirect staging/teardown logic found byte-for-byte in a second sample 4435fcd6862921092614dbeaa880e4192352984686ebcd98f0ba13ee8e226ef9 (the latter spoofing /sniper/snipe/bin/dtnpd and /sniper/bin/ofgmd).”
Seen in threat feeds
1 feed| Feed | First seen | Last seen | Sightings | What the feed says |
|---|---|---|---|---|
| abuse.ch MalwareBazaar | 1 | — |
Indicators reported together
named in the same reports- spamsniper[.]pidin 1 report
- a37ea9897221d449…ee58931adbf3in 1 report
- 7e667ba5f9df912e…18ebd925b1b5in 1 report
- a6f3b7f932761fb1…65da195bfa7ain 1 report
- 652508a9cf40bee8…c21f73b4963fin 1 report
- 2bedc26d4b29b435…4fb1656d7b15in 1 report
- 59.125.211[.]65in 1 report
- 122.116.138[.]33in 1 report
- 1.34.200[.]85in 1 report
- bf8135f46ecedfe5…8e6597f49e47in 1 report
- 4925bcca085ec504…336c697b4de8in 1 report
- a4379e115d3c4420…d47de68e6a6ain 1 report
- 925c041807d4fb9d…44478ffc2cf2in 1 report
- 2fe2dd402ee6f9c5…ca80feb60150in 1 report
- a65048eb30661e27…caf069a32858in 1 report
Copy these 15 indicators · defanged
Thanks — we review every report.