Essential information

Value / Name

cdn.90baf13f03000000040003000000.160303009d0100009903036713bfbe1a8dea1ce0b97a5196762fe327f8da77.0a06e9aff09fff3a4f07cc1400002ac02cc02bc030c02f009f009ec024c023.c028c027c00ac009c014c013009d009c003d003c00.ns1.brownswer.com

Confidence

100/100

Revoked

Yes

Valid from

11/12/2024 03:51

Valid until

15/11/2025 12:34

Pattern type

stix

Published

20/12/2025 19:49

Modified

21/12/2025 08:20

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'cdn.90baf13f03000000040003000000.160303009d0100009903036713bfbe1a8dea1ce0b97a5196762fe327f8da77.0a06e9aff09fff3a4f07cc1400002ac02cc02bc030c02f009f009ec024c023.c028c027c00ac009c014c013009d009c003d003c00.ns1.brownswer.com']

Labels / Tags

Labels: banking trojan dns tunneling ghostsocks initial access zeus zloader

Marking (TLP)

TLP:CLEAR