不正URLへのアクセス、不正メールの受信
-
メール受信した
弊社お客様0社 URLアクセスした
弊社お客様3社 -
2026/01/27
※2026/01/27 更新
マルウェア感染させると考えられるURLを検知（2026/01/27）
■IoC（※1）
| Type: | IOC: | Signature: |
|---|---|---|
| URL | hxxp://91[.]92[.]241[.]10:235/lolMiner_v1[.]98_Lin64[.]tar[.]gz | Coinminer |
| URL | hxxp://45[.]93[.]20[.]55/Bot[.]exe | TinyNuke |
| URL | hxxp://45[.]93[.]20[.]55/zx[.]exe | SVCStealer |
| URL | hxxp://68[.]183[.]109[.]173/[.]u/3sh hxxp://37[.]120[.]167[.]228/[.]s/pty5 hxxp://37[.]120[.]167[.]228/[.]s/pty2 hxxp://37[.]120[.]167[.]228/[.]s/pty3 hxxp://37[.]120[.]167[.]228/[.]s/pty4 hxxp://37[.]120[.]167[.]228/[.]s/pty1 |
Tsunami |
| URL | hxxp://94[.]156[.]152[.]67/bins/pi586 hxxp://94[.]156[.]152[.]67/bins/pi686 hxxp://94[.]156[.]152[.]67/bins/pi486 hxxp://103[.]73[.]161[.]85/sh4 |
Bashlite |
| URL | hxxp://130[.]12[.]180[.]43/files/6021162326/vjU8KET[.]exe | DeerStealer |
| URL | hxxps://api[.]telegram[.]org/bot8569954548:AAGEfBsHN-hnH7CfidfXMsX64p_BT43uuzs/sendMessage?chat_id=1443320838 hxxps://api[.]telegram[.]org/bot8202902973:AAEwZ-dcCYWIrEwRJ7OBmODl1PGgHRJIWPo/sendMessage?chat_id=8348822501 hxxps://api[.]telegram[.]org/bot8460788277:AAFeXlPKINAWlQ6o47wF9EDN3oz-wjXNSQk/sendMessage?chat_id=5019476480 hxxps://api[.]telegram[.]org/bot8517540605:AAEGEpiQE4Cvu1Rjp8NCMAO77kCxgZNVmiI/sendMessage?chat_id=8571316016 |
Stealerium |
| URL | hxxps://digitsgroup[.]com/wp-includes/zz/optimized_MSI[.]png | MASS Logger |
| URL | hxxps://45[.]74[.]16[.]46/YjQzOWMzYTQ4NzJm/ hxxps://567855erdhd2361211f9813c0c4d18f2a5f[.]com/YjQzOWMzYTQ4NzJm/ hxxps://56785341f9813c0c4d18f3243242a5f[.]com/YjQzOWMzYTQ4NzJm/ hxxps://567235dhd2361211f9813c0c4d18f2a5f[.]com/YjQzOWMzYTQ4NzJm/ hxxps://5325d2361211f9813c0c4d1238f2a5f[.]com/YjQzOWMzYTQ4NzJm/ hxxps://567855561211f9813c0c4234d18f2a5f[.]com/YjQzOWMzYTQ4NzJm/ |
Coper |
| URL | hxxps://fluraresto[.]me/live/ hxxps://mastralakkot[.]live/live/ |
Latrodectus |
| URL | hxxps://trebblay[.]com/5h5h[.]js hxxps://trebblay[.]com/js[.]php |
KongTuke |
| URL | hxxp://47[.]239[.]230[.]84:9999/02[.]08[.]2022[.]exe hxxp://121[.]40[.]37[.]253:50059/02[.]08[.]2022[.]exe hxxp://20[.]226[.]26[.]143/02[.]08[.]2022[.]exe |
Cobalt Strike |
| URL | hxxps://2av9bxno[.]sn1pglacier[.]ru/?=check&&actmn=FSgJOkaerhgnWAfg | ClearFake |
| URL | hxxps://api[.]telegram[.]org/bot8498071055:AAHpkLnFSqcqoBJ5BRLXLoNzGKZN-fcRM_E/sendMessage?chat_id=5801620744 | AsyncRAT |
| URL | hxxp://130[.]12[.]180[.]43/files/7724151170/vxCnaoV[.]exe | Quasar RAT |
