111.111.111[.]111IP address
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 3 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Operation Bleeding Bear“cmd.exe /min /C ping 111.111.111[.]111 -n 5 -w 10 > Nul & Del /f /q <running process path>”
Indicators reported together
named in the same reports- process[.]pein 1 report
- a196c6b8ffcb97ff…f56f36a38e92in 1 report
- dcbbae5a1c61dbbb…9384081c9b78in 1 report
- 34ca75a8c190f20b…5b61ac7ea907in 1 report
- 923eb77b3c9e11d6…eeb73d1accd6in 1 report
- 9ef7dbd3da51332a…a07d716d892din 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.