Defensive CTI in motion

Live feed of what psyc has detected and what it has done about it.

Today 40

1. New medium malware from malware-bazaar medium

   MalwareBazaar: unsigned elf sample — godisdead.9

   08:55 · PSYC-MBAZAAR-db4f0210310781e6
   →
2. New medium malware from malware-bazaar medium

   MalwareBazaar: unsigned elf sample — godisdead.10

   08:55 · PSYC-MBAZAAR-6a65b7f6a85ed893
   →
3. New medium malware from malware-bazaar medium

   MalwareBazaar: unsigned elf sample — godisdead.7

   08:55 · PSYC-MBAZAAR-6d1b7c3710dd5c85
   →
4. New medium malware from malware-bazaar medium

   MalwareBazaar: unsigned elf sample — godisdead.5

   08:55 · PSYC-MBAZAAR-199ee99eeac1258a
   →
5. New medium malware from malware-bazaar medium

   MalwareBazaar: unsigned exe sample — libgup.dll

   08:55 · PSYC-MBAZAAR-b9dc00589356c64a
   →
6. New medium malware from malware-bazaar medium

   MalwareBazaar: Loki exe sample — F36C98BA174C0B3F8D055E4FC6B426B4.exe

   08:55 · PSYC-MBAZAAR-4a452076b878800c
   →
7. New medium malware from malware-bazaar medium

   MalwareBazaar: NanoCore exe sample — f168.exe

   08:55 · PSYC-MBAZAAR-e88504f2b5ae3fae
   →
8. New medium malware from malware-bazaar medium

   MalwareBazaar: unsigned sh sample — ic3iseeyoujewishpigeons.sh

   08:55 · PSYC-MBAZAAR-5ca14d1c6924b6d1
   →
9. New medium malware from malware-bazaar medium

   MalwareBazaar: unsigned exe sample — libgup.dll

   08:55 · PSYC-MBAZAAR-78a444c1d65d53dc
   →
10. New medium malware from malware-bazaar medium

    MalwareBazaar: DarkTortilla exe sample — PO23352 & PO23321.com

    08:55 · PSYC-MBAZAAR-05e47adb0cfea558
    →
11. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned sh sample — bins.sh

    08:55 · PSYC-MBAZAAR-169bb98a3e27c68c
    →
12. New medium malware from malware-bazaar medium

    MalwareBazaar: Mirai elf sample — python3.6

    08:55 · PSYC-MBAZAAR-3af9f25a4d45bb4f
    →
13. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned sh sample — k.php

    08:55 · PSYC-MBAZAAR-ccb94b6f083ffd26
    →
14. New medium malware from threatfox medium

    ThreatFox: ClearFake payload delivery — mhhalmi.pokerkade.online

    08:55 · PSYC-THREATFOX-1831692
    →
15. New medium malware from threatfox medium

    ThreatFox: ClearFake payload delivery — dngzhceb.hugugmadani3.xyz

    08:55 · PSYC-THREATFOX-1831693
    →
16. New medium malware from threatfox medium

    ThreatFox: ClearFake payload delivery — psmecdlr.hugugedari.xyz

    08:55 · PSYC-THREATFOX-1831694
    →
17. New medium malware from threatfox medium

    ThreatFox: ClearFake payload delivery — kg0kdihy.gavaedfagahe.xyz

    08:55 · PSYC-THREATFOX-1831695
    →
18. New medium malware from threatfox medium

    ThreatFox: ClearFake payload delivery — jyvartai.hugugdaryayi.xyz

    08:55 · PSYC-THREATFOX-1831696
    →
19. New medium botnet from threatfox medium

    ThreatFox: Mirai botnet cc — 152.236.6.8:28291

    08:55 · PSYC-THREATFOX-1831697
    →
20. New medium malware from threatfox medium

    ThreatFox: ClearFake payload delivery — aoeoelfz.hugugbime.xyz

    08:55 · PSYC-THREATFOX-1831698
    →
21. New medium malware from threatfox medium

    ThreatFox: ClearFake payload delivery — krigo.ecologyardakani.xyz

    08:55 · PSYC-THREATFOX-1831699
    →
22. New medium malware from threatfox medium

    ThreatFox: ClearFake payload delivery — gsdzofat.winxbet.co

    08:55 · PSYC-THREATFOX-1831700
    →
23. New medium malware from threatfox medium

    ThreatFox: ClearFake payload delivery — v47e4385.fununetadris.shop

    08:55 · PSYC-THREATFOX-1831701
    →
24. New medium malware from threatfox medium

    ThreatFox: ClearFake payload delivery — ggcjxgov.fununetadris.shop

    08:55 · PSYC-THREATFOX-1831702
    →
25. New medium malware from threatfox medium

    ThreatFox: ClearFake payload delivery — obmhxqg.rocketbet.pro

    08:55 · PSYC-THREATFOX-1831703
    →
26. New medium botnet from threatfox medium

    ThreatFox: AsyncRAT botnet cc — 45.156.87.226:8545

    08:55 · PSYC-THREATFOX-1831704
    →
27. New medium malware from threatfox medium

    ThreatFox: ClearFake payload delivery — alrwomdp.restaurantguideaarhus.com

    08:55 · PSYC-THREATFOX-1831705
    →
28. New medium botnet from threatfox medium

    ThreatFox: Cobalt Strike botnet cc — 178.154.229.148:443

    08:55 · PSYC-THREATFOX-1831706
    →
29. New medium botnet from threatfox medium

    ThreatFox: Cobalt Strike botnet cc — 92.53.97.113:8443

    08:55 · PSYC-THREATFOX-1831707
    →
30. New high malware from urlhaus high

    URLhaus: malware_download at 222.141.27.62 (tags: 32-bit, elf, mips, Mozi)

    08:55 · PSYC-URLHAUS-3863925
    →
31. New medium malware from urlhaus medium

    URLhaus: malware_download at mhhalmi.pokerkade.online (tags: ClearFake)

    08:55 · PSYC-URLHAUS-3863926
    →
32. New medium malware from urlhaus medium

    URLhaus: malware_download at dngzhceb.hugugmadani3.xyz (tags: ClearFake)

    08:55 · PSYC-URLHAUS-3863927
    →
33. New high malware from urlhaus high

    URLhaus: malware_download at 182.120.145.126 (tags: 32-bit, elf, mips, Mozi)

    08:55 · PSYC-URLHAUS-3863928
    →
34. New high malware from urlhaus high

    URLhaus: malware_download at 182.116.36.178 (tags: 32-bit, elf, mips, Mozi)

    08:55 · PSYC-URLHAUS-3863929
    →
35. New high malware from urlhaus high

    URLhaus: malware_download at 222.141.27.62 (tags: 32-bit, elf, mips, Mozi)

    08:55 · PSYC-URLHAUS-3863930
    →
36. New high malware from urlhaus high

    URLhaus: malware_download at 182.116.36.178 (tags: 32-bit, elf, mips, Mozi)

    08:55 · PSYC-URLHAUS-3863931
    →
37. New high malware from urlhaus high

    URLhaus: malware_download at 36.249.193.242 (tags: 32-bit, arm, elf, mirai)

    08:55 · PSYC-URLHAUS-3863932
    →
38. New high malware from urlhaus high

    URLhaus: malware_download at 115.55.159.216 (tags: 32-bit, elf, mips, Mozi)

    08:55 · PSYC-URLHAUS-3863933
    →
39. New medium malware from urlhaus medium

    URLhaus: malware_download at psmecdlr.hugugedari.xyz (tags: ClearFake)

    08:55 · PSYC-URLHAUS-3863934
    →
40. New high malware from urlhaus high

    URLhaus: malware_download at 116.10.132.101 (tags: 32-bit, arm, elf, mirai)

    08:55 · PSYC-URLHAUS-3863935
    →