Phorpiex
Phorpiex/Trik 僵尸网络。 178.16.54.109 C2 IP。 lb10/lb11/lb12 多级有效负载。垃圾邮件+加密货币挖掘+剪辑器。
威胁档案
类型
Botnet
编程语言C++
C2协议HTTP/P2P
首次发现2016
目标
Kuresel
用途 / 能力
- 垃圾邮件僵尸网络/加载程序
C2服务器 4
4 活跃
| 地址 | 端口 | 协议 | 状态 | 操作 |
|---|---|---|---|---|
178.16.54.109
Phorpiex payload URL (lb10/lb11/lb12.exe)
|
- | HTTP | 活跃 | |
178.16.54.109
|
80 | HTTP | 活跃 | |
178.16.54.109
|
80 | HTTP | 活跃 | |
178.16.54.109
|
80 | HTTP | 活跃 |
⚠ C2 地址仅用于威胁情报和防御目的。未经授权访问这些地址属于违法行为。
研究报告 (4)
Phorpiex -- 178.16.54.109 C2 IP, lb10.exe lb11.exe lb12.exe Çok Aşamalı Payload Zinciri, MyAgent Mutex | Yüksek
Phorpiex 113KB. 178.16.54.109 C2 IP. lb10.exe lb11.exe lb12.exe ardışık cok asamali payload indirme. MyAgent mutex kimlik.
阅读报告 →Phorpiex Botnet -- 178.16.54.109 C2, lb10.exe+lb11.exe+lb12.exe Çoklu Payload | Yüksek
Phorpiex 113KB. 178.16.54.109 C2. lb10.exe lb11.exe lb12.exe coklu payload URL. Botnet numarali yukleyici zinciri.
阅读报告 →Phorpiex Botnet -- 178.16.54.109 IP C2, lb10/lb11/lb12.exe Zincir İndirme | Yüksek
Phorpiex 113KB. 178.16.54.109/lb10.exe + lb11.exe + lb12 zincir indirme IP C2. ip-api.com coğrafi konum. GetTickCount.
阅读报告 →Phorpiex -- 113KB, 178.16.54.109 Açık Metin C2, lb10.exe/lb11.exe Payload | Kritik
Phorpiex 113KB. 178.16.54.109 cleartext C2. lb10.exe/lb11.exe payload URL. ip-api.com GeoIP.
阅读报告 →