IoC Extractor

This IoC extractor identifies Indicators of Compromise (IoCs) by matching patterns, without analyzing the context of the surrounding text. Manual Review and Validation of the extracted IoCs are essential before any action is used.

Leveraging DNS Tunneling for Tracking and Scanning

DATE : 2024-05-13T23:00:48
SOURCE : paloaltonetworks.com

CVE:
cve-2012-1033

FILE_HASH_MD5:
4e09ef9806fb9af448a5efcd60395815

Domain:
malicious.site
simitor.com
vibnere.com
edrefo.com
pordasa.info
vitrfar.info
frotel.info
datesimitor.com04b16bbbf91be3e2fee2c83151131cf5.trk.simitor.comns1.simitor.com
ns2.simitor.com
2023vibnere.coma8fc70b86e828ffed0f6b3408d30a037.trk.vibnere.comns1.vibnere.com
ns2.vibnere.com
2023edrefo.com6e4ae1209a2afe123636f6074c19745d.trk.edrefo.comns1.edrefo.com
ns2.edrefo.com
2023pordasa.info2c0b9017cf55630f1095ff42d9717732.trk.pordasa.infons1.pordasa.info
ns2.pordasa.info
2022vitrfar.info0fa17586a20ef2adf2f927c78ebaeca3.trk.vitrfar.infons1.vitrfar.info
ns2.vitrfar.info
2022frotel.info50e5927056538d5087816be6852397f6.trk.frotel.infons1.frotel.info
ns2.frotel.info
cdn.simitor.com
trk.simitor.com
ns1.simitor.com
not-a-real-domain.com
4e09ef9806fb9af448a5efcd60395815.trk.simitor.com
timesecshow.net6a134b4f-1.c.secshow.netns1.c.secshow.net
ns2.c.secshow.net
2023secshow.online1-103-170-192-121-103-170-192-9.f.secshow.onlinens.secshow.online
2023secdns.site0-53aa2a46-202401201-ans-dnssec.l-test.secdns.sitens1.l-test.secdns.site
ns2.l-test.secdns.site
timewzbhk2ccghtshr.com21pwt2otx07d3et.wzbhk2ccghtshr.comns01.wzbhk2ccghtshr.com
ns02.wzbhk2ccghtshr.com
2023epyujbhfhbs35j.comy0vkmu2eh896he7.epyujbhfhbs35j.comns01.epyujbhfhbs35j.com
ns02.epyujbhfhbs35j.com
20238egub9e7s6cz7n.comq8udswcmvznk34q.8egub9e7s6cz7n.comns01.8egub9e7s6cz7n.com
ns02.8egub9e7s6cz7n.com
2023hjmpfsamfkj5m5.comrun0ibnpq8r34dj.hjmpfsamfkj5m5.comns01.hjmpfsamfkj5m5.com
ns02.hjmpfsamfkj5m5.com
2023uxjxfg2ui8k5zk.comvfct3phbmc8qsx2.uxjxfg2ui8k5zk.comns01.uxjxfg2ui8k5zk.com
ns02.uxjxfg2ui8k5zk.com
2023cgb488dixfxjw7.comhtujn1rhh3553tc.cgb488dixfxjw7.comns01.cgb488dixfxjw7.com
ns02.cgb488dixfxjw7.com
bc2874fb-1.c.secshow.net
c.secshow.net
20240212190003.bailiwick.secshow.net
afusdnfysbsf.com
1-103-170-192-121-103-170-192-9.h.secshow.net
0-53ea2a3a-202401201-ans-dnssec.l-test.secdns.site
85hsyad6i2ngzp.com
8egub9e7s6cz7n.com
8jtuazcr548ajj.com
anrad9i7fb2twm.com
aucxjd8rrzh7xf.com
b5ba24k6xhxn7b.com
cgb488dixfxjw7.com
d6zeh4und3yjt9.com
epyujbhfhbs35j.com
hhmk9ixaw9p3ec.com
hjmpfsamfkj5m5.com
iszedim8xredu2.com
npknraafbisrs7.com
patycyfswg33nh.com
rhctiz9xijd4yc.com
sn9jxsrp23x63a.com
swh9cpz2xntuge.com
tp7djzjtcs6gm6.com
uxjxfg2ui8k5zk.com
wzbhk2ccghtshr.com
y43dkbzwar7cdt.com
ydxpwzhidexgny.com
z54zspih9h5588.com
3yfr6hh9dd3.com
4bs6hkaysxa.com
66tye9kcnxi.com
8kk68biiitj.com
93dhmp7ipsp.com
api536yepwj.com
bb62sbtk3yi.com
cytceitft8g.com
dipgprjp8uu.com
ege6wf76eyp.com
f6kf5inmfmj.com
f6ywh2ud89u.com
h82c3stb3k5.com
hwa85y4icf5.com
ifjh5asi25f.com
m9y6dte7b9i.com
n98erejcf9t.com
rz53par3ux2.com
szd4hw4xdaj.com
wj9ii6rx7yd.com
wk7ckgiuc6i.com
secshow.net
secshow.online
secdns.site