Anonymizing VPN Services as a Botnet Monetization Strategy
Show in Graph
Image Description
Common Information
Type Value
UUID dffeb3cd-3948-44e1-ae5a-5885b20c284f
Fingerprint af8c3d5aadf0ad390c7dd2976152ba234aef8d73a1a324a376faa7eb23a0e0da
Analysis status DONE
Considered CTI value 1
Text language
Published None
Added to db April 16, 2024, 6:04 p.m.
Last updated Aug. 30, 2024, 11:51 p.m.
Headline Anonymizing VPN Services as a Botnet Monetization Strategy
Title Anonymizing VPN Services as a Botnet Monetization Strategy
Detected Hints/Tags/Attributes 44/3/19
Source URLs
Redirection Url
Details Redirection https://www.virusbulletin.com/pdf/conference_slides/2015/FrankoffHasherezade-VB2015.pdf
Details Source https://www.virusbulletin.com/uploads/pdf/conference_slides/2015/FrankoffHasherezade-VB2015.pdf
URL Provider
Details Provider Source level domain
Details virusbulletin.com www.virusbulletin.com
Attributes
Details Type #Events CTI Value
Details Domain 8 
stopmalvertising.com
Details Domain 4128 
github.com
Details Domain 707 
google.com
Details Domain 1 
crdclub.so
Details Domain 2 
verified.mn
Details Domain 21 
alibaba.com
Details Domain 4 
royalbank.com
Details Domain 1 
jdate.com
Details Domain 2 
datehookup.com
Details Domain 229 
match.com
Details File 1 
mlicnai.dll
Details File 1 
naukgol.dll
Details Github username 35 
hasherezade
Details md5 1 
b0a91e1f91078bad48252edc989e868e
Details md5 1 
85ae39ee4fed066797fed137fc1fc332
Details Url 1 
https://github.com/hasherezade/bunitu_tests/wiki/bunitu-gallery
Details Url 1 
https://github.com/hasherezade/bunitu_tests/wiki
Details Windows Registry Key 188 
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Details Windows Registry Key 49 
HKLM\Software\Microsoft\Windows