• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Mustang Panda C2 DNS query for couldinstallup.com

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Duo Tech@duotech
    •updated Jul 10, 2026•3•0•7

    Detects network traffic (DNS, TLS SNI, and HTTP Host header) to the domain 'couldinstallup.com', which is associated with Command and Control (C2) activity by the threat group Mustang Panda.

    Suricata

    Tags

    T1071.001 - Web ProtocolsT1583.001 - DomainsG0129 - Mustang PandaTA0011 - Command and ControlTA0042 - Resource DevelopmentNetwork ConnectionDNS QueryHTTP RequestIDS IPS AlertNetwork GenericSuricata IDSSnort IDSDNSTrojan Activity

    Found in

    • Mustang Panda Targets Indian Government and EnergyLast updated Jun 29, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?