JSAC2019
Common Information
| Type | Value |
|---|---|
| UUID | e17e1659-0207-47d9-aff6-8867849f0b5f |
| Fingerprint | b429ac6f59211d4eb2cb5b1bf7d3b008f7553e19ac13cb2dea7c8fec214e49f9 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Jan. 18, 2019, 9:33 a.m. |
| Added to db | March 12, 2024, 7:28 p.m. |
| Last updated | Aug. 31, 2024, 4:37 a.m. |
| Headline | JSAC2019 |
| Title | JSAC2019 |
| Detected Hints/Tags/Attributes | 69/2/68 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | http://jsac.jpcert.or.jp/archive/2019/pdf/JSAC2019_1_koike-nakajima_jp.pdf |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 92 | cve-2018-4878 |
|
| Details | CVE | 106 | cve-2018-8174 |
|
| Details | CVE | 27 | cve-2018-8373 |
|
| Details | CVE | 59 | cve-2018-15982 |
|
| Details | CVE | 36 | cve-2013-2551 |
|
| Details | CVE | 25 | cve-2015-2419 |
|
| Details | CVE | 77 | cve-2016-0189 |
|
| Details | Domain | 26 | www.jpcert.or.jp |
|
| Details | Domain | 41 | malware.dontneedcoffee.com |
|
| Details | Domain | 110 | exploit.in |
|
| Details | Domain | 141 | research.checkpoint.com |
|
| Details | Domain | 1 | nagoyashi.chimkent.su |
|
| Details | Domain | 2 | infolocalip.com |
|
| Details | Domain | 1 | po0o0o0o.at |
|
| Details | Domain | 1 | fyreplittgothin.pw |
|
| Details | Domain | 1 | revivalresumed.com |
|
| Details | Domain | 1 | goldenfreeanhfirst.com |
|
| Details | Domain | 1 | simsim.adygeya.su |
|
| Details | Domain | 1 | newwfreedomaincom.com |
|
| Details | Domain | 2 | fritsy83.website |
|
| Details | Domain | 2 | oo00mika84.website |
|
| Details | Domain | 2 | ns1.cloud-name.ru |
|
| Details | Domain | 4 | ns1.wowservers.ru |
|
| Details | Domain | 28 | securingtomorrow.mcafee.com |
|
| Details | Domain | 4127 | github.com |
|
| Details | Domain | 1 | coughsmoggyspark.co |
|
| Details | Domain | 132 | blockchain.info |
|
| Details | Domain | 43 | blockchain.com |
|
| Details | Domain | 1373 | twitter.com |
|
| Details | File | 1 | jsac2018_04_koike-nakajima.pdf |
|
| Details | File | 1 | asia-18-papa-future-proof%20counter%20attacks%20against%20exploit%20kit%20infrastructure-wp.pdf |
|
| Details | File | 3 | cve-2018-8174.html |
|
| Details | File | 1205 | index.php |
|
| Details | File | 3 | osiris.exe |
|
| Details | File | 2 | osiris_jmjp_auto2_noinj.exe |
|
| Details | File | 1 | exploerer.exe |
|
| Details | File | 1122 | svchost.exe |
|
| Details | File | 1 | recent-reports-ransomware-using-namecoin-missing-real-story.html |
|
| Details | File | 34 | eventvwr.exe |
|
| Details | File | 32 | prefs.js |
|
| Details | File | 1 | 'blockchain.inf |
|
| Details | Github username | 1 | prsecurity |
|
| Details | IPv4 | 1 | 88.208.7.192 |
|
| Details | IPv4 | 1 | 88.208.7.193 |
|
| Details | IPv4 | 1 | 185.56.233.186 |
|
| Details | IPv4 | 1 | 193.124.180.99 |
|
| Details | IPv4 | 1 | 23.254.161.197 |
|
| Details | IPv4 | 1 | 46.229.214.132 |
|
| Details | IPv4 | 1 | 94.103.80.138 |
|
| Details | IPv4 | 1 | 128.199.37.74 |
|
| Details | IPv4 | 1 | 109.248.59.111 |
|
| Details | IPv4 | 1 | 80.87.197.238 |
|
| Details | IPv4 | 1 | 213.183.51.62 |
|
| Details | IPv4 | 1 | 95.46.8.133 |
|
| Details | Url | 1 | https://www.jpcert.or.jp/present/2018/jsac2018_04_koike-nakajima.pdf |
|
| Details | Url | 1 | https://www.blackhat.com/docs/asia-18/asia-18-papa-future-proof%20counter%20attacks%20against%20exploit%20kit%20infrastructure-wp.pdf |
|
| Details | Url | 3 | https://malware.dontneedcoffee.com/2018/05/cve-2018-8174.html |
|
| Details | Url | 2 | https://blog.malwarebytes.com/threat-analysis/2018/07/hidden-bee-miner-delivered-via-improved-drive-by-download-toolkit |
|
| Details | Url | 1 | https://blog.trendmicro.com/trendlabs-security-intelligence/new-underminer-exploit-kit-delivers-bootkit-and-cryptocurrency-mining-malware-with-encrypted-tcp-tunnel |
|
| Details | Url | 1 | https://research.checkpoint.com/the-emergence-of-the-new-azorult-3-3 |
|
| Details | Url | 1 | http://128.199.37.74/index.php |
|
| Details | Url | 1 | http://46.229.214.132/index.php |
|
| Details | Url | 1 | https://research.checkpoint.com/osiris-enhanced-banking-trojan |
|
| Details | Url | 2 | http://fritsy83.website/osiris.exe |
|
| Details | Url | 2 | http://oo00mika84.website/osiris_jmjp_auto2_noinj.exe |
|
| Details | Url | 1 | https://www.namecoin.org/2018/01/30/recent-reports-ransomware-using-namecoin-missing-real-story.htmlより引用 |
|
| Details | Url | 4 | https://securingtomorrow.mcafee.com/mcafee-labs |
|
| Details | Url | 1 | https://github.com/prsecurity/kpot-admin-c2-source-code |