622ddc28910eb5482c0ed8b01b10270a20c25206SHA-1 hash
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 3 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Netscaler Exploitation to Social Engineering“wmic /node:[redacted] process call create \"cmd /c powershell.exe -nop -ep bypass -c c:\\windows\\temp\\esd.ps1 622ddc28910eb5482c0ed8b01b10270a20c25206-fbf201cb-s\"”
Indicators reported together
named in the same reports- 5ba2c0f4d58d7e12…22ecb7990eeain 1 report
- hxxps://91.236.230[.]111/1/18150e98in 1 report
- 91.236.230[.]111in 1 report
- z9x[.]orgin 1 report
- 5ee3e274a79f6ad7…b78497b1a5c2in 1 report
- 3c1829079eecd453…932aada2c370in 1 report
- 3742b9cb7a7e664d…4b7bab983025in 1 report
- edd464cd0069324d…07f0d946ed2cin 1 report
- baf385c3f35a4850…9d695effca6fin 1 report
- f4dbed01049e1691…fb5aeed38804in 1 report
- cbd2567b61c7be8b…e18746e7dff6in 1 report
- 3ac2d170eeefd5d8…a80b95946712in 1 report
- 06de42d666b3ae54…ed78ead8a148in 1 report
- bbdd3620a67aedec…02a6f4bc6f41in 1 report
- faf37bcbbcaff2de…216298779c62in 1 report
- 886f3add934cb8e3…29a6bb233279in 1 report
Copy these 16 indicators · defanged
Also named with it: CVE-2023-3519
Thanks — we review every report.