Ransomware Variant XTBL Another Example of Popular Malware | McAfee Blog
Tags
| attack-pattern: | Data Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 2b9fddfa-1e1a-45f4-a2a3-482e38c814b4 |
| Fingerprint | 9cb53a5184110603 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Oct. 17, 2016, noon |
| Added to db | June 1, 2023, 10:45 a.m. |
| Last updated | Nov. 17, 2024, 6:55 p.m. |
| Headline | Ransomware Variant XTBL Another Example of Popular Malware |
| Title | Ransomware Variant XTBL Another Example of Popular Malware | McAfee Blog |
| Detected Hints/Tags/Attributes | 27/1/14 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 2 | filename.id |
|
| Details | Domain | 1 | bebgimeozel.com |
|
| Details | Domain | 1 | dd24.net |
|
| Details | Domain | 1 | rrpproxy.net |
|
| Details | Domain | 3 | key-systems.net |
|
| Details | Domain | 1 | tuginsaat.com |
|
| Details | File | 1122 | svchost.exe |
|
| Details | File | 1260 | explorer.exe |
|
| Details | File | 120 | boot.ini |
|
| Details | File | 140 | files.txt |
|
| Details | File | 3 | decrypt.jpg |
|
| Details | File | 85 | log.txt |
|
| Details | sha1 | 1 | e3aa4a3882fed182986a642f05b3711156ca5354 |
|
| Details | sha1 | 1 | a07a1660ebd71bff4b640665208d2ade51791e69 |