ctwo.msoftupdates.com

Classification: Malicious

ctwo.msoftupdates.com is a malicious hostname. Linked to Apt37 activity. Reported by 3 threat sources (Malware site, IOC_03032020), last seen 2023-07-05.

Current activity

  • Offline — no longer resolving. Last online 2023-07-05 20:51:43.

MITRE ATT&CK associations

Intrusion sets: APT37 (G0067)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Apt37 Maltiverse 2023-07-04 04:28:50 2023-07-05 20:51:43 malicious-activity G0067 APT37
Malware site Hybrid-Analysis 2021-12-15 03:15:30 2021-12-15 03:15:30
IOC_03032020 CronUp Threat Intel 2020-03-03 05:50:59 2020-03-03 05:50:59

Tags

apt

IP addresses resolved by this hostname

Whois information

AS name
AS17506 UCOM Corp.
Domain
msoftupdates.com
TLD
com
First indexed
2020-03-03 05:50:59
Last updated
2026-09-18 06:18:59