Bubble
Tags
| attack-pattern: | Data Software - T1592.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 6776893b-d15d-46f1-bfec-880d25918e40 |
| Fingerprint | be310842945418ea |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | June 27, 2017, 1:35 a.m. |
| Added to db | Jan. 18, 2023, 7:52 p.m. |
| Last updated | Nov. 18, 2024, 4:35 a.m. |
| Headline | Шифровальщики-вымогатели The Digest "Crypto-Ransomware" |
| Title | Bubble |
| Detected Hints/Tags/Attributes | 12/1/9 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | http://id-ransomware.blogspot.com/2017/06/bubble-ransomware.html |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | notsharingmy.info |
|
| Details | Domain | 1176 | gmail.com |
|
| Details | Domain | 6 | hmamail.com |
|
| Details | 1 | br5wf@notsharingmy.info |
||
| Details | 1 | bubble.lck@gmail.com |
||
| Details | 1 | bubble_lck@hmamail.com |
||
| Details | File | 1 | preventivo.pdf |
|
| Details | File | 1 | notsharingmy.inf |
|
| Details | Windows Registry Key | 112 | HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run |