Finding drive-by rookies using an automated active observation platform
Show in Graph
Image Description
Common Information
Type Value
UUID 9b5415e4-ccea-4956-b102-eeda753e9a58
Fingerprint c68c2a96dd4df4a01137071743ed2d798d67876ecf4a3ae81e15995c1aa9adf7
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 3, 2019, 10:53 p.m.
Added to db April 16, 2024, 8:28 p.m.
Last updated Aug. 31, 2024, 12:18 a.m.
Headline Finding drive-by rookies using an automated active observation platform
Title Finding drive-by rookies using an automated active observation platform
Detected Hints/Tags/Attributes 49/2/20
Source URLs
Redirection Url
Details Source https://www.virusbulletin.com/uploads/pdf/conference_slides/2019/VB2019-KoikeChubachi.pdf
URL Provider
Details Provider Source level domain
Details virusbulletin.com www.virusbulletin.com
Attributes
Details Type #Events CTI Value
Details CVE 77 
cve-2016-0189
Details Domain 21 
nao-sec.org
Details Domain 1373 
twitter.com
Details Domain 4127 
github.com
Details Email 1 
info@nao-sec.org
Details File 2 
hello-fallout-exploit-kit.html
Details File 2 
weak-dbd-attack-with-radioek.html
Details Github username 5 
nao-sec
Details Github username 2 
malwareinfosec
Details Github username 1 
nao-
Details Url 2 
https://blog.malwarebytes.com/threat-analysis/2018/07/hidden-bee-miner-delivered-via-improved-drive-by-download-toolkit
Details Url 1 
https://nao-sec.org/2018/09/hello-fallout-exploit-kit.html
Details Url 1 
https://twitter.com/kafeine/status/1103649040800145409
Details Url 1 
https://twitter.com/jeromesegura/status/1148289957716344832
Details Url 2 
https://nao-sec.org/2019/07/weak-dbd-attack-with-radioek.html
Details Url 1 
https://twitter.com/adrian__luca/status/1156934215566536705
Details Url 1 
https://github.com/nao-sec/starc
Details Url 1 
https://github.com/nao-sec/ektotal
Details Url 2 
https://github.com/malwareinfosec/ekfiddle
Details Url 1 
https://github.com/nao-