195.201.198[.]179IP address

Reported by 1 independent source · first reported 27 Oct 2023 by Elastic Security Labs · last reported 27 Oct 2023

Last reported 2 years ago

What the reports say

1 report, newest first · the exact sentence from each

“In this case, it was 195.201.198[.]179 over TCP port 15647 as shown below:”

Elastic Security LabsVendor27 Oct 2023
GHOSTPULSE haunts victims using defense evasion bag o' tricks

Indicators reported together

named in the same reports

hxxps://manojsinghnegi[.]com/2.tar.gpgin 1 report
manojsinghnegi[.]comin 1 report
78.24.180[.]93in 1 report
0c01324555494c35…380d7bec7a20in 1 report
ee4c788dd4a17324…6d6355c1d1b8in 1 report
4283563324c083f2…40f969d9d356in 1 report
eb2addefd7538cbd…410937681c61in 1 report
49e6a11453786ef9…427982e8c7a9in 1 report

Copy these 8 indicators · defanged

8 indicators, defanged, one per line

hxxps://manojsinghnegi[.]com/2.tar.gpg
manojsinghnegi[.]com
78.24.180[.]93
0c01324555494c35c6bbd8babd09527bfc49a2599946f3540bb3380d7bec7a20
ee4c788dd4a173241b60d4830db128206dcfb68e79c68796627c6d6355c1d1b8
4283563324c083f243cf9335662ecc9f1ae102d619302c79095240f969d9d356
eb2addefd7538cbd6c8eb42b70cafe82ff2a8210e885537cd94d410937681c61
49e6a11453786ef9e396a9b84aeb8632f395477abc38f1862e44427982e8c7a9

Thanks — we review every report.

Report a wrong value