hxxp://zjc[.]bz:8080URL
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 3 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Evolution of USB-Borne Malware, Raspberry Robin“…DISK.lnk”, launches “cmd /C!coMSPEc!<FN.iCo”, which runs msiexec.exe (in this case, “mSiexeC”) to download and install a file from hxxp://ZjC[.]bz:8080.”
Indicators reported together
named in the same reports- hxxp://5g7[.]at:8080/y8yNq/iZR/whjn/Ax6q80a/Y1Z5/j/fs/VTSAO?xxxxin 1 report
- 5g7[.]atin 1 report
- hxxp://fxb[.]tw:8080/AMBG/9FlMJgrIkRjJfVw2bWSju/Machine=Userin 1 report
- fxb[.]twin 1 report
- hxxp://ejk[.]bz:8080/BC/A3Y7fxb0oDMXkstfQGYd/Machine?Userin 1 report
- ejk[.]bzin 1 report
- hxxp://jrx[.]fr:8080/yKyC/bSis/yUp0OSNBN0eTTIjpK/Machine=Userin 1 report
- jrx[.]frin 1 report
- hxxp://zjc[.]bz:8080/AoA3LSHNJCaFIM/hMgkh/62oyni/in 1 report
- zjc[.]bzin 1 report
Copy these 10 indicators · defanged
Thanks — we review every report.