内容仅以原始语言提供
class="post-article">
Botnet C++ 自2016年起活跃

Phorpiex

Phorpiex/Trik botnet. 178.16.54.109 C2 IP. lb10/lb11/lb12 cok asamali payload. Spam + crypto mining + clipper.

威胁档案
类型 Botnet
编程语言C++
C2协议HTTP/P2P
首次发现2016
目标 Kuresel
用途 / 能力
  • Spam Botnet / Loader

C2服务器 4

4 活跃
地址 端口 协议 状态 操作
178.16.54.109
Phorpiex payload URL (lb10/lb11/lb12.exe)
 - HTTP 活跃
178.16.54.109
80 HTTP 活跃
178.16.54.109
80 HTTP 活跃
178.16.54.109
80 HTTP 活跃

⚠ C2 地址仅用于威胁情报和防御目的。未经授权访问这些地址属于违法行为。

研究报告 (4)

Yüksek

Phorpiex -- 178.16.54.109 C2 IP, lb10.exe lb11.exe lb12.exe Çok Aşamalı Payload Zinciri, MyAgent Mutex | Yüksek

Phorpiex 113KB. 178.16.54.109 C2 IP. lb10.exe lb11.exe lb12.exe ardışık cok asamali payload indirme. MyAgent mutex kimlik.

阅读报告 →
Yüksek

Phorpiex Botnet -- 178.16.54.109 C2, lb10.exe+lb11.exe+lb12.exe Çoklu Payload | Yüksek

Phorpiex 113KB. 178.16.54.109 C2. lb10.exe lb11.exe lb12.exe coklu payload URL. Botnet numarali yukleyici zinciri.

阅读报告 →
Yüksek

Phorpiex Botnet -- 178.16.54.109 IP C2, lb10/lb11/lb12.exe Zincir İndirme | Yüksek

Phorpiex 113KB. 178.16.54.109/lb10.exe + lb11.exe + lb12 zincir indirme IP C2. ip-api.com coğrafi konum. GetTickCount.

阅读报告 →
Kritik

Phorpiex -- 113KB, 178.16.54.109 Açık Metin C2, lb10.exe/lb11.exe Payload | Kritik

Phorpiex 113KB. 178.16.54.109 cleartext C2. lb10.exe/lb11.exe payload URL. ip-api.com GeoIP.

阅读报告 →