kapulainen.ru
Classification: Malicious
kapulainen.ru is a malicious hostname. Linked to Bundlore malware. Reported by 2 threat sources, last seen 2019-03-17.
Current activity
- Offline — no longer resolving. Last online 2023-07-05 23:31:37.
MITRE ATT&CK associations
Malware families: BUNDLORE (S0482)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic.Malware | Hybrid-Analysis | 2018-04-28 22:45:16 | 2019-03-17 14:45:05 | ||
| Application.Bundler.FileTour | Hybrid-Analysis | 2018-05-02 17:15:18 | 2018-05-05 09:00:13 | ||
| FileTour | Hybrid-Analysis | 2018-04-30 00:15:26 | 2018-04-30 00:15:26 | ||
| Adware.FileTour | Hybrid-Analysis | 2018-04-07 19:31:03 | 2018-04-24 18:01:55 | ||
| Adware | Hybrid-Analysis | 2018-04-21 16:00:15 | 2018-04-21 16:00:15 | ||
| bundlore | Maltiverse | 2018-03-14 14:46:22 | 2018-03-14 14:46:22 | S0482 Bundlore |
Tags
bundlore evasive coinminer downloader minerIP addresses resolved by this hostname
- 206.54.161.139 (2018-04-07 19:31:03)
Whois information
- AS name
- AS35415 Webzilla B.V.
- Domain
- kapulainen.ru
- TLD
- ru
- Nameservers
- ns1.reg.ru., ns2.reg.ru.
- First indexed
- 2018-03-14 14:46:23
- Last updated
- 2025-11-11 05:34:26