【インディケータ情報】
■IPアドレス -Sora or Unstable -
45.148.10.86
193.70.125.169
(以上は Trendmicro の情報: 引用元は https://blog.trendmicro.co.jp/wp-content/uploads/2020/02/IoCs_SORA_UNSTABLE.pdf )
■URL -Sora or Unstable -
http://faygox.duckdns.org/thinkphp
http://faygox.duckdns.org/gpon443
(以上は Trendmicro の情報: 引用元は https://blog.trendmicro.co.jp/wp-content/uploads/2020/02/IoCs_SORA_UNSTABLE.pdf )
■FQDN -Sora or Unstable -
zxcxffyttygbbgfgf12121bot.duckdns.org
cnctomecutie1337.mikeysyach.xyz
scanthembigbots.mikeysyach.xyz
(以上は Trendmicro の情報: 引用元は https://blog.trendmicro.co.jp/wp-content/uploads/2020/02/IoCs_SORA_UNSTABLE.pdf )
【検索】
google: 45.148.10.86
google: 193.70.125.169
http://faygox.duckdns.org/thinkphp
http://faygox.duckdns.org/gpon443
google: zxcxffyttygbbgfgf12121bot.duckdns.org
google: cnctomecutie1337.mikeysyach.xyz
google: scanthembigbots.mikeysyach.xyz
【VT検索】
https://www.virustotal.com/gui/ip-address/45.148.10.86/detection
https://www.virustotal.com/gui/ip-address/193.70.125.169/detection
https://www.virustotal.com/gui/url/554089694c06403f45bb4a6350600c150ac24d01f5fee1b416bf16fa0fd6c853/detection
https://www.virustotal.com/gui/url/3050478af8e8fd279d2c133d5960df2f96ef86f76ce998f616c94226022b3016/detection
https://www.virustotal.com/gui/domain/zxcxffyttygbbgfgf12121bot.duckdns.org/detection
https://www.virustotal.com/gui/domain/cnctomecutie1337.mikeysyach.xyz/detection
https://www.virustotal.com/gui/domain/scanthembigbots.mikeysyach.xyz/detection
【ブログ】
◆ホームルータや監視カメラ用ストレージシステムを狙うIoTマルウェア：「SORA」と「UNSTABLE」 (Trendmicro, 2020/02/17)
https://blog.trendmicro.co.jp/archives/23916
⇒ https://malware-log.hatenablog.com/entry/2020/02/17/000000_2
