不正URLへのアクセス、不正メールの受信
-
メール受信した
弊社お客様0社 URLアクセスした
弊社お客様1社 -
2026/03/17
※2026/03/19 更新
マルウェア感染させると考えられるURLを検知（2026/03/17）
■IoC（※1）
| Type: | IOC: | Signature: |
|---|---|---|
| URL | hxxp://5[.]175[.]223[.]124/t[.]sh | Bashlite |
| URL | hxxp://80[.]89[.]237[.]190/1[.]exe hxxp://188[.]137[.]254[.]207/1[.]exe hxxp://158[.]94[.]208[.]7/files/7782139129/S6xWuZ1[.]exe hxxp://188[.]137[.]230[.]45/1[.]exe hxxp://158[.]94[.]208[.]7/files/6691015685/Nb2YOyu[.]exe |
Vidar |
| URL | hxxp://45[.]32[.]150[.]251:4789/socket[.]io/ hxxp://45[.]32[.]150[.]251/3e4Tg8V%2F8aCmOJKipASADg%3D%3D hxxp://45[.]32[.]150[.]251/IZeqdX38aTS6j3EvNTaC8g%3D%3D hxxp://217[.]69[.]3[.]51/Aq9UfpDha27tnnODBaw7OA%3D%3D hxxp://217[.]69[.]3[.]51/get_arhive_npm/QfSoYf%2Bg5YdyaN0mq0Od2Q%3D%3D hxxp://217[.]69[.]3[.]51/led-win32 hxxp://217[.]69[.]0[.]159/Aq9UfpDha27tnnODBaw7OA%3D%3D |
GlassWorm |
| URL | hxxps://147[.]124[.]221[.]241:1149/9c59034ac60846f8/mrx8h4of[.]prxvo | Rhadamanthys |
| URL | hxxps://api[.]telegram[.]org/bot8528232795:AAEcxrshf3NCvH1DpgB1iUuJ-dP6S1-Hbe0/sendMessage?chat_id=6623091671 | MASS Logger |
| URL | hxxp://96[.]44[.]159[.]250/img_212607[.]png | Remcos |
| URL | hxxps://wiowyaea[.]lakebit[.]digital/?=check&&actmn=bQVRicjiWGHhxCEb | ClearFake |
| URL | hxxps://api[.]telegram[.]org/bot8676391589:AAHTKbZEAvX68o3eEKS473PsZrHlBhXct70/sendMessage?chat_id=8277275661 | Stealerium |
| URL | hxxps://tt-pjipa[.]com/api hxxps://workltt[.]quest/owner hxxps://watchhr[.]biz/manifest hxxps://thundut[.]biz/create hxxps://mobbyyt[.]club/info hxxps://lumpeem[.]quest/main hxxps://genusne[.]click/caccc hxxps://familbg[.]club/help hxxps://egyptnf[.]click/xxx |
Lumma Stealer |
| URL | hxxp://158[.]94[.]208[.]7/files/7341834371/7AfcfsM[.]exe | SmokeLoader |
| URL | hxxps://apkinsta[.]com/apk/APKInsta_v2[.]4[.]1[.]apk | AhMyth |
| URL | hxxp://158[.]94[.]208[.]7/files/7341834371/ZaB5quI[.]exe | Stealc |
| URL | hxxp://158[.]94[.]208[.]7/files/7362035837/FbbqcXE[.]exe | ACR Stealer |
| URL | hxxp://104[.]156[.]59[.]222/installer16[.]exe | Tsundere |
| URL | hxxps://ussbtv[.]com/4a9g[.]js hxxps://ussbtv[.]com/js[.]php hxxps://mariadrakou[.]com/left |
KongTuke |
| URL | hxxps://www[.]seftugo[.]com/wp-blog-footer[.]php?page= | IClickFix |
