45.182.189[.]109IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 8 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
Shaping Shadows: Breaking Down New ShadowSyndicate Methods and Infrastructure“45.182.189[.]109”
-
Boolka Unveiled: From web attacks to modular malware“In January 2024 Group-IB detected a new ShadowSyndicate server with IP address 45.182.189[.]109 by SSH fingerprint 1ca4cbac895fc3bd12417b77fc6ed31d.”
Indicators reported together
named in the same reports- 1ca4cbac895fc3bd12417b77fc6ed31din 1 report
- hxxps://beef.beonlineboo[.]com/hook.jsin 1 report
- beef.beonlineboo[.]comin 1 report
- 1-update-soft[.]comin 1 report
- update-brower[.]comin 1 report
- hxxps://updatebrower[.]com/download/bmbackup.txt;bmbackup;C:Programin 1 report
- updatebrower[.]comin 1 report
- hxxps://updatebrower[.]com/download/bmhook.txt;bmhook;C:Programin 1 report
- hxxps://updatebrower[.]com/download/bmlog.txt;bmlog;C:Programin 1 report
- hxxps://updatebrower[.]com/download/bmreader.txt;bmreader;C:Programin 1 report
- 2f10a81bc5a1aad7…bc6219ea1802in 1 report
- tacke[.]ruin 1 report
- 7266f20123edcb2e…53bff06719e4in 1 report
- 9434e2f277f764bb…68b7e9b4b3a2in 1 report
- b2dbd3187c67883c…e37f5985e367in 1 report
- 94430690ac9516a2…0b5f750685eein 1 report
- 227b8233071da4d3…23afb798375ain 1 report
- 194.165.16[.]68in 1 report
- 141.98.81[.]23in 1 report
- 179.60.150[.]123in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.