KeZhang-Aug2015.indd
Show in Graph
Image Description
Common Information
Type Value
UUID 7e9ba88b-8c7d-4c84-82f8-85696d7b296c
Fingerprint 5a72ea41d39c1ec7928fa5958ebe84ee15ae69de3b2a617ef051de933077de03
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 1, 2015, 11:43 a.m.
Added to db April 18, 2024, 9:47 a.m.
Last updated Aug. 31, 2024, 12:59 a.m.
Headline KeZhang-Aug2015.indd
Title KeZhang-Aug2015.indd
Detected Hints/Tags/Attributes 23/3/19
Source URLs
Redirection Url
Details Source https://www.virusbulletin.com/uploads/pdf/magazine/2015/vb201509-custom-packer.pdf
URL Provider
Details Provider Source level domain
Details virusbulletin.com www.virusbulletin.com
Attributes
Details Type #Events CTI Value
Details Domain 404 
www.virusbtn.com
Details Domain 337 
virusbtn.com
Details Domain 1 
galaxysproducts.com
Details Domain 1 
degreat248.no-ip.org
Details Domain 1 
www.nuclearwintercrew.com
Details Email 330 
editorial@virusbtn.com
Details File 7 
vmmouse.sys
Details File 6 
vmhgfs.sys
Details File 5 
vboxmouse.sys
Details File 6 
vboxguest.sys
Details File 83 
sbiedll.dll
Details md5 1 
40D19FBA73C6B011814E2C6920E8792F
Details md5 1 
FBDEC6F2A565E5B6844A7DE2F785EC88
Details md5 1 
BA2A65C19C961A51739E28DF238FB0EA
Details md5 1 
9C306303F6656435500A6A3C53793758
Details Url 290 
http://www.virusbtn.com
Details Url 1 
http://galaxysproducts.com
Details Url 1 
http://www.nuclearwintercrew.com
Details Windows Registry Key 2 
HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi