STRRAT botnet controller @54.218.207.65

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.

Malware botnet controller located at 54.218.207.65 on port 1177 TCP:
$ telnet 54.218.207.65 1177
Trying 54.218.207.65…
Connected to 54.218.207.65.
Escape character is ‘^]’

$ nslookup 54.218.207.65
ec2-54-218-207-65.us-west-2.compute.amazonaws.com

$ dig +short spdxx.ddns.net
54.218.207.65

Referencing malware samples:
MD5 73da8c0e5b6b69c2e951c3a941ff2c79

Опубликовано
В рубрике amazon.com

Добавить комментарий

Ваш адрес email не будет опубликован.