Marlboro
Tags
attack-pattern: Server - T1583.004 Server - T1584.004 Software - T1592.002
Show in Graph
Common Information
Type Value
UUID 48f54a00-8168-4e45-8784-2bbe754e983e
Fingerprint 36f153fbe4678a32
Analysis status DONE
Considered CTI value 0
Text language
Published Jan. 12, 2017, 9 p.m.
Added to db Jan. 18, 2023, 7:51 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Шифровальщики-вымогатели The Digest "Crypto-Ransomware"
Title Marlboro
Detected Hints/Tags/Attributes 29/1/17
Source URLs
Redirection Url
Details Source http://id-ransomware.blogspot.com/2017/01/marlboro.html
Details Source https://id-ransomware.blogspot.co.il/2017/01/marlboro.html
URL Provider
Details Provider Source level domain
Details blogspot.co.il id-ransomware.blogspot.co.il
Details blogspot.com id-ransomware.blogspot.com
Attributes
Details Type #Events CTI Value
Details Domain 622 
en.wikipedia.org
Details Domain 1 
localbitcoms.com
Details Domain 27 
coincafe.com
Details Domain 39 
cex.io
Details Domain 23 
btcdirect.eu
Details Domain 1 
tsoft.16mb.com
Details Domain 1 
mhustler2018.000webhostapp.com
Details File 2 
_help_recover_files_.html
Details File 345 
vssadmin.exe
Details File 1 
maxi.docm
Details File 1 
decryptfiles.exe
Details File 1 
wicked.exe
Details File 2 
ipoverusbsvc.exe
Details IPv4 1 
31.220.104.93
Details IPv4 1 
153.92.15.10
Details Url 23 
https://en.wikipedia.org/wiki/rsa_
Details Url 1 
https://en.wikipedia.org/wiki/advanced_encnption_standard