IoC (TT Malware Log)

Malware の IoC(Indicator)情報

◆注意◆ マルウェア専門家向けサイト

     FQDN, URL,IPアドレス等はそのまま掲載しています


** Caution ** Malware expert site

                    FQDN, URL, IP address etc. are posted as they are

Sora or Unstable

【インディケータ情報】

■IPアドレス -Sora or Unstable -

45.148.10.86
193.70.125.169

(以上は Trendmicro の情報: 引用元は https://blog.trendmicro.co.jp/wp-content/uploads/2020/02/IoCs_SORA_UNSTABLE.pdf )


■URL -Sora or Unstable -

http://faygox.duckdns.org/thinkphp
http://faygox.duckdns.org/gpon443

(以上は Trendmicro の情報: 引用元は https://blog.trendmicro.co.jp/wp-content/uploads/2020/02/IoCs_SORA_UNSTABLE.pdf )


■FQDN -Sora or Unstable -

zxcxffyttygbbgfgf12121bot.duckdns.org
cnctomecutie1337.mikeysyach.xyz
scanthembigbots.mikeysyach.xyz

(以上は Trendmicro の情報: 引用元は https://blog.trendmicro.co.jp/wp-content/uploads/2020/02/IoCs_SORA_UNSTABLE.pdf )


【検索】

google: 45.148.10.86
google: 193.70.125.169

http://faygox.duckdns.org/thinkphp
http://faygox.duckdns.org/gpon443

google: zxcxffyttygbbgfgf12121bot.duckdns.org
google: cnctomecutie1337.mikeysyach.xyz
google: scanthembigbots.mikeysyach.xyz


【VT検索】

https://www.virustotal.com/gui/ip-address/45.148.10.86/detection
https://www.virustotal.com/gui/ip-address/193.70.125.169/detection

https://www.virustotal.com/gui/url/554089694c06403f45bb4a6350600c150ac24d01f5fee1b416bf16fa0fd6c853/detection
https://www.virustotal.com/gui/url/3050478af8e8fd279d2c133d5960df2f96ef86f76ce998f616c94226022b3016/detection

https://www.virustotal.com/gui/domain/zxcxffyttygbbgfgf12121bot.duckdns.org/detection
https://www.virustotal.com/gui/domain/cnctomecutie1337.mikeysyach.xyz/detection
https://www.virustotal.com/gui/domain/scanthembigbots.mikeysyach.xyz/detection




【ブログ】

◆ホームルータや監視カメラ用ストレージシステムを狙うIoTマルウェア:「SORA」と「UNSTABLE」 (Trendmicro, 2020/02/17)
https://blog.trendmicro.co.jp/archives/23916
https://malware-log.hatenablog.com/entry/2020/02/17/000000_2