MarionMarschalek-July2014.indd
Common Information
| Type | Value |
|---|---|
| UUID | 0bba3195-cb5b-4094-a4ce-ac5b7871310f |
| Fingerprint | a234f6ec1ad4eef1f17cecb543c597a55298891b8a502c89af127d0d003ee9e0 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | July 8, 2014, 5:50 p.m. |
| Added to db | April 16, 2024, 6:09 p.m. |
| Last updated | Aug. 30, 2024, 11:53 p.m. |
| Headline | MarionMarschalek-July2014.indd |
| Title | MarionMarschalek-July2014.indd |
| Detected Hints/Tags/Attributes | 78/2/59 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 36 | cve-2013-2551 |
|
| Details | Domain | 404 | www.virusbtn.com |
|
| Details | Domain | 1 | stat.litecsys.com |
|
| Details | Domain | 1 | vstat.feared.eu |
|
| Details | Domain | 1 | g12z4pj3k4k9y4wd517-ll6.dienami.ru |
|
| Details | Domain | 1 | 1service.org |
|
| Details | Domain | 4127 | github.com |
|
| Details | Domain | 36 | malwr.com |
|
| Details | Domain | 22 | anubis.iseclab.org |
|
| Details | Domain | 3 | www.gironsec.com |
|
| Details | Domain | 1 | waleedassar.blogspot.co.at |
|
| Details | Domain | 1 | interestingmalware.blogspot.co.at |
|
| Details | Domain | 2 | www.dependencywalker.com |
|
| Details | Domain | 1 | www.ni69.info |
|
| Details | Domain | 2 | www.vb-decompiler.org |
|
| Details | Domain | 1 | thunked.org |
|
| Details | Domain | 8 | stopmalvertising.com |
|
| Details | Domain | 337 | virusbtn.com |
|
| Details | 330 | editorial@virusbtn.com |
||
| Details | File | 218 | min.js |
|
| Details | File | 1 | d2.php |
|
| Details | File | 1 | kshortcutcleaner.exe |
|
| Details | File | 6 | g.exe |
|
| Details | File | 2 | setup.dat |
|
| Details | File | 20 | msvbvm60.dll |
|
| Details | File | 42 | vboxservice.exe |
|
| Details | File | 74 | vmtoolsd.exe |
|
| Details | File | 10 | myapp.exe |
|
| Details | File | 533 | ntdll.dll |
|
| Details | File | 748 | kernel32.dll |
|
| Details | File | 11 | mbamgui.exe |
|
| Details | File | 459 | regsvr32.exe |
|
| Details | File | 1 | basic-malware-part-1.html |
|
| Details | File | 1 | unpacking-vbinjectvbcryptrunpe.html |
|
| Details | File | 1 | search_order.htm |
|
| Details | File | 1 | ni69.inf |
|
| Details | File | 1 | attackingwebbrowsers.pdf |
|
| Details | File | 7 | www.vb |
|
| Details | File | 1 | decompiling.htm |
|
| Details | File | 1 | malware-t110.html |
|
| Details | File | 1 | analysis-of-trojan-win32-miuref-a.html |
|
| Details | md5 | 1 | D4A38E03010E1DA7DE7D1B942FF222BA |
|
| Details | md5 | 1 | b87ba20746a80e1104da210172b634c4 |
|
| Details | md5 | 1 | 217ED8FA9CBD9774596AC60E4BA0E3D2 |
|
| Details | IPv4 | 1 | 195.2.253.38 |
|
| Details | IPv4 | 1 | 146.255.195.124 |
|
| Details | Url | 60 | https://github.com |
|
| Details | Url | 1 | https://malwr.com/analysis/ntezndrkywq4ymzk |
|
| Details | Url | 1 | https://anubis.iseclab.org/?action=result&task_id=19 |
|
| Details | Url | 1 | http://www.gironsec.com/blog/2014/05/unpacking- |
|
| Details | Url | 1 | http://waleedassar.blogspot.co.at/2012/03/visual- |
|
| Details | Url | 1 | http://interestingmalware.blogspot.co.at/2010/07 |
|
| Details | Url | 1 | http://www.dependencywalker.com/help/html/hidd_ |
|
| Details | Url | 1 | http://www.ni69.info/documents/security |
|
| Details | Url | 1 | http://www.vb-decompiler.org/pcode_ |
|
| Details | Url | 1 | https://thunked.org/programming/decrypting-runpe- |
|
| Details | Url | 1 | http://stopmalvertising.com/malware-reports |
|
| Details | Url | 290 | http://www.virusbtn.com |
|
| Details | Windows Registry Key | 14 | HKLM\Software\Microsoft |