ASEC Weekly Malware Statistics (December 5th, 2022 – December 11th, 2022) - ASEC BLOG
Tags
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 |
Common Information
| Type | Value |
|---|---|
| UUID | 1ca290bf-6bdd-40a2-8566-c65b3b5496ea |
| Fingerprint | af11394acdfb22e3 |
| Analysis status | IN_PROGRESS |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 15, 2022, 3:10 p.m. |
| Added to db | Dec. 15, 2022, 8:41 a.m. |
| Last updated | Nov. 17, 2024, 9:42 p.m. |
| Headline | ASEC Weekly Malware Statistics (December 5th, 2022 – December 11th, 2022) |
| Title | ASEC Weekly Malware Statistics (December 5th, 2022 – December 11th, 2022) - ASEC BLOG |
| Detected Hints/Tags/Attributes | 34/2/82 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://asec.ahnlab.com/en/44354/ |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 17 | ✔ | ASEC | https://asec.ahnlab.com/en/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 5 | smgqnt3eixxksasu.xyz |
|
| Details | Domain | 3 | aqwe9sfiwswpyvmj.xyz |
|
| Details | Domain | 145 | api.telegram.org |
|
| Details | Domain | 1 | mail.pumaelektrik.com |
|
| Details | Domain | 1 | pumaelektrik.com |
|
| Details | Domain | 1174 | gmail.com |
|
| Details | Domain | 33 | smtp.yandex.com |
|
| Details | Domain | 155 | yandex.com |
|
| Details | Domain | 1 | usf.hu |
|
| Details | Domain | 5 | consultant.com |
|
| Details | Domain | 5 | hulimudulinu.net |
|
| Details | Domain | 5 | stalnnuytyt.org |
|
| Details | Domain | 6 | nuluitnulo.me |
|
| Details | Domain | 5 | youyouumenia5.org |
|
| Details | Domain | 5 | guluiiiimnstra.net |
|
| Details | Domain | 4 | akmedia.in |
|
| Details | Domain | 4 | bethesdaserukam.org |
|
| Details | Domain | 3 | stemschools.in |
|
| Details | Domain | 3 | dejarestaurant.com |
|
| Details | Domain | 3 | moabscript.ir |
|
| Details | Domain | 3 | nicehybridseeds.com |
|
| Details | Domain | 3 | imaker.io |
|
| Details | Domain | 3 | nanavatisworld.com |
|
| Details | Domain | 3 | smartbubox.com |
|
| Details | Domain | 3 | krigenpharmaceuticals.com |
|
| Details | Domain | 1 | www.sathunter.site |
|
| Details | Domain | 2 | www.blemchi.xyz |
|
| Details | Domain | 5 | www.tacosmina.info |
|
| Details | Domain | 4 | www.eroptik.online |
|
| Details | Domain | 1 | www.zugaro.xyz |
|
| Details | Domain | 1 | www.cvbiop.xyz |
|
| Details | Domain | 1 | www.lalalanowa.info |
|
| Details | Domain | 3 | www.crtinha.xyz |
|
| Details | Domain | 4 | www.haremp.xyz |
|
| Details | Domain | 1 | www.hampyko.online |
|
| Details | Domain | 3 | www.gawiul.xyz |
|
| Details | 1 | cs@pumaelektrik.com |
||
| Details | 1 | officeforward2@gmail.com |
||
| Details | 5 | prince.omd@yandex.com |
||
| Details | 1 | backup@usf.hu |
||
| Details | 1 | johnson22@consultant.com |
||
| Details | File | 1205 | index.php |
|
| Details | File | 24 | count.php |
|
| Details | File | 1 | onemore.php |
|
| Details | File | 47 | order.exe |
|
| Details | File | 1 | 30k.exe |
|
| Details | File | 1 | 25000.exe |
|
| Details | File | 1 | 223090101010.pdf |
|
| Details | File | 1 | transaction_history_2022121-15712.exe |
|
| Details | File | 1260 | explorer.exe |
|
| Details | File | 1 | ref_00256754.exe |
|
| Details | File | 1 | 20200318.xlsx |
|
| Details | File | 4 | www.crt |
|
| Details | IPv4 | 1 | 31.41.244.167 |
|
| Details | IPv4 | 3 | 77.73.133.72 |
|
| Details | IPv4 | 3 | 193.56.146.194 |
|
| Details | IPv4 | 3 | 31.41.244.237 |
|
| Details | IPv4 | 2 | 85.209.135.109 |
|
| Details | IPv4 | 21 | 45.139.105.171 |
|
| Details | IPv4 | 3 | 85.208.136.148 |
|
| Details | Url | 1 | http://31.41.244.167/v7ewcjs/index.php |
|
| Details | Url | 3 | http://77.73.133.72/hfk3vk9/index.php |
|
| Details | Url | 3 | http://193.56.146.194/h49vlbp/index.php |
|
| Details | Url | 3 | http://31.41.244.237/jg94cvd30f/index.php |
|
| Details | Url | 5 | http://smgqnt3eixxksasu.xyz/jg94cvd30f/index.php |
|
| Details | Url | 3 | http://aqwe9sfiwswpyvmj.xyz/jg94cvd30f/index.php |
|
| Details | Url | 3 | http://pmvqdjfuf3wlx9ki.xyz/jg94cvd30f/index.php |
|
| Details | Url | 2 | http://85.209.135.109/jg94cvd30f/index.php |
|
| Details | Url | 6 | http://45.139.105.171/itsnotmalware/count.php |
|
| Details | Url | 1 | http://85.208.136.148/onemore.php |
|
| Details | Url | 1 | https://api.telegram.org/bot5792273343 |
|
| Details | Url | 1 | http://www.sathunter.site/tpd2 |
|
| Details | Url | 2 | http://www.blemchi.xyz/ng04 |
|
| Details | Url | 4 | http://www.tacosmina.info/n2hm |
|
| Details | Url | 3 | http://www.eroptik.online/j17j |
|
| Details | Url | 1 | http://www.zugaro.xyz/gs25 |
|
| Details | Url | 1 | http://www.cvbiop.xyz/pr28 |
|
| Details | Url | 1 | http://www.lalalanowa.info/q4k5 |
|
| Details | Url | 3 | http://www.crtinha.xyz/s20g |
|
| Details | Url | 2 | http://www.haremp.xyz/tc10 |
|
| Details | Url | 1 | http://www.hampyko.online/a19i |
|
| Details | Url | 3 | http://www.gawiul.xyz/mi08 |