Sepsis
Tags
attack-pattern: | Data Software - T1592.002 Tool - T1588.002 |
Common Information
Type | Value |
---|---|
UUID | 2eeaab3d-a2f2-4532-845b-e08d2be1cb9a |
Fingerprint | 8625793e1ced0e1a |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | May 15, 2018, 12:12 a.m. |
Added to db | Jan. 18, 2023, 7:54 p.m. |
Last updated | Nov. 17, 2024, 6:55 p.m. |
Headline | Шифровальщики-вымогатели The Digest "Crypto-Ransomware" |
Title | Sepsis |
Detected Hints/Tags/Attributes | 17/1/15 |
Source URLs
Redirection | Url | |
---|---|---|
Details | Source | http://id-ransomware.blogspot.com/2018/05/sepsis-ransomware.html |
URL Provider
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | Domain | 396 | protonmail.com |
|
Details | Domain | 84 | airmail.cc |
|
Details | Domain | 1 | locabitcoins.com |
|
Details | Domain | 68 | www.coindesk.com |
|
Details | Domain | 911 | any.run |
|
Details | 2 | sepsis@protonmail.com |
||
Details | 1 | sepsis@airmail.cc |
||
Details | File | 1122 | svchost.exe |
|
Details | File | 345 | vssadmin.exe |
|
Details | File | 105 | bcdedit.exe |
|
Details | File | 1 | sadeghsample_5afc4a7c9931365644caeb64.exe |
|
Details | File | 3 | wr.exe |
|
Details | File | 13 | c:\windows\svchost.exe |
|
Details | Url | 1 | https://locabitcoins.com/buy |
|
Details | Url | 41 | http://www.coindesk.com/information/how-can-i-buy-bitcoins |