内容仅以原始语言提供
class="post-article">
Ransomware C++ 自2020年起活跃

Conti2

Conti Wizard Spider 2020 RaaS. run-as-admin.exe UAC. mojobiden.com+paymenthacks.com C2. supp24yy support onion. 2022 Conti Leaks.

威胁档案
类型 Ransomware
编程语言C++
C2协议HTTPS/TOR
首次发现2020
目标 Kritik Altyapi
用途 / 能力
  • Ransomware (RaaS)

C2服务器 5

2 活跃
地址 端口 协议 状态 操作
mojobiden.com
443 HTTPS 活跃
mojobiden.com
80 HTTP 活跃
paymenthacks.com
443 HTTPS INACTIVE
paymenthacks.com
80 HTTP INACTIVE
supp24yy6a66hwszu2piygicgwzdtbwftb76htfj7vnip3getgqnzxid.onion
80 HTTP INACTIVE

⚠ C2 地址仅用于威胁情报和防御目的。未经授权访问这些地址属于违法行为。

研究报告 (3)

Kritik

Conti Ransomware -- run-as-admin.exe, mojobiden.com+paymenthacks.com C2, Destek Onion | Kritik

Conti 515KB run-as-admin.exe. mojobiden.com paymenthacks.com C2. supp24yy6a66hwszu2piygicgwzdtbwftb76htfj7vnip3getgqnzxid.onion destek.

阅读报告 →
Kritik

Conti Ransomware -- mojobiden.com Siyasi Lure, paymenthacks.com, Tor Onion C2 | Kritik

Conti 515KB run-as-admin.exe. mojobiden.com siyasi lure + paymenthacks.com C2. supp24yy... Tor onion destek.

阅读报告 →
Kritik

Conti -- run-as-admin.exe 515KB, mojobiden.com/paymenthacks.com C2, TOR Onion, net stop | Kritik

Conti run-as-admin.exe 515KB. C2: mojobiden.com, paymenthacks.com. TOR onion. net stop wuauserv.

阅读报告 →