a6f3b7f932761fb1fd5e74123f2482e36c65dd13e769af2ce08c65da195bfa7aSHA-256 hash
Reported by 1 independent source · first reported by Rapid7 · last reported
Last reported 22 days ago
What the reports say
1 report, newest first · the exact sentence from each-
SMTP is the key: BPFDoor and AVERAT hitting the network edge“The BPFDoor sample (a6f3b7f932761fb1fd5e74123f2482e36c65dd13e769af2ce08c65da195bfa7a) attaches a SOCK_RAW 16-BPF instructions parsing IP/TCP offsets and gates on a 14-byte payload (2B 76 C0 63 83 E9 5F E1 EE 69 3F 32 CD 94, unique per sample).”
Indicators reported together
named in the same reports- spamsniper[.]pidin 1 report
- a37ea9897221d449…ee58931adbf3in 1 report
- 7e667ba5f9df912e…18ebd925b1b5in 1 report
- 4435fcd686292109…13ee8e226ef9in 1 report
- 652508a9cf40bee8…c21f73b4963fin 1 report
- 2bedc26d4b29b435…4fb1656d7b15in 1 report
- 59.125.211[.]65in 1 report
- 122.116.138[.]33in 1 report
- 1.34.200[.]85in 1 report
- bf8135f46ecedfe5…8e6597f49e47in 1 report
- 4925bcca085ec504…336c697b4de8in 1 report
- a4379e115d3c4420…d47de68e6a6ain 1 report
- 925c041807d4fb9d…44478ffc2cf2in 1 report
- 2fe2dd402ee6f9c5…ca80feb60150in 1 report
- a65048eb30661e27…caf069a32858in 1 report
Copy these 15 indicators · defanged
Thanks — we review every report.