ASEC Weekly Malware Statistics (December 13th, 2021 - December 19th, 2021) - ASEC BLOG
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Domains - T1583.001 Domains - T1584.001 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID 7f115f81-7f69-473a-a9d6-c8e0020d0804
Fingerprint ed043d6aadfb0293
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 28, 2021, 4:10 p.m.
Added to db Sept. 11, 2022, 4:59 p.m.
Last updated Nov. 17, 2024, 6:49 p.m.
Headline ASEC Weekly Malware Statistics (December 13th, 2021 – December 19th, 2021)
Title ASEC Weekly Malware Statistics (December 13th, 2021 - December 19th, 2021) - ASEC BLOG
Detected Hints/Tags/Attributes 37/2/122
Source URLs
Redirection Url
Details Source https://asec.ahnlab.com/en/30107/
URL Provider
Details Provider Source level domain
Details ahnlab.com asec.ahnlab.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
www.gerlom.online
Details Domain 1 
www.sabutl.online
Details Domain 2 
www.becbares.com
Details Domain 1 
www.emonk.xyz
Details Domain 1 
www.athrea.xyz
Details Domain 1 
www.butuns.com
Details Domain 2 
www.strikco.link
Details Domain 1 
www.sepal.online
Details Domain 2 
www.posetac.online
Details Domain 1 
www.wromie.xyz
Details Domain 1 
www.cutos2.com
Details Domain 1 
www.banypi.online
Details Domain 1 
www.ceser33.com
Details Domain 1 
www.motometics.com
Details Domain 1 
www.ycov.online
Details Domain 1 
www.emaxpy.xyz
Details Domain 1 
www.eihncuz.online
Details Domain 1 
www.bamko.link
Details Domain 1 
www.niywest.online
Details Domain 1 
www.abevot.xyz
Details Domain 3 
www.haztol.xyz
Details Domain 1 
www.r4search.com
Details Domain 1 
www.satgerv.online
Details Domain 3 
mail.croatiahunt.com
Details Domain 3 
croatiahunt.com
Details Domain 2 
empire-eyewear.com
Details Domain 1 
mail.ekdantlab.co.in
Details Domain 1 
ekdantlab.co.in
Details Domain 3 
mail.neneka.org
Details Domain 3 
neneka.org
Details Domain 1 
ginnalodaned.xyz
Details Domain 10 
secure01-redirect.net
Details Domain 1 
rfsfju.xyz
Details Domain 1 
moneyfinders.xyz
Details Domain 1 
mail.jithiadaproperties.com
Details Domain 1 
hdmibonquet.ir
Details Domain 1 
artstyle.top
Details Domain 6 
ad-postback.biz
Details Email 3 
info@croatiahunt.com
Details Email 2 
t.aidinis@empire-eyewear.com
Details Email 1 
info@ekdantlab.co.in
Details Email 2 
choi@neneka.org
Details Email 2 
mary@neneka.org
Details File 6 
ltd.exe
Details File 1 
gaia_899388190pdf.exe
Details File 2 
new_orde.exe
Details File 1 
121621-112a.exe
Details File 1 
211213-0221a.exe
Details File 1 
211217-031a.exe
Details File 1 
211521-015a.exe
Details File 1 
4781rny2196.exe
Details File 1 
po772928.exe
Details File 95 
pdf.exe
Details File 2 
purchase_order_pdf.exe
Details File 32 
quotation.exe
Details File 2 
scanpmt.exe
Details File 7 
quote.pdf
Details File 1260 
explorer.exe
Details File 4 
t.ai
Details File 1 
updated_soa.exe
Details File 1 
tt_confirmation.exe
Details File 1 
tnt_original_invoice.exe
Details File 1 
revised_new_order.exe
Details File 47 
order.exe
Details File 2 
proforma_invoice.exe
Details File 2 
new_purchase_order.exe
Details File 35 
invoice.exe
Details File 1 
bl_draft_copy.exe
Details File 3 
bank_details.exe
Details File 1 
awb_kr4546765854.exe
Details File 1 
0751air210300090-cre001.exe
Details File 6 
invoices.exe
Details File 1 
comproba.exe
Details File 1 
01-20210521.exe
Details File 82 
fre.php
Details IPv4 1 
185.112.83.69
Details IPv4 1 
85.202.169.212
Details IPv4 2 
91.243.32.13
Details IPv4 1 
144.76.183.53
Details IPv4 3 
185.215.113.57
Details IPv4 1 
62.182.159.87
Details IPv4 5 
193.150.103.37
Details IPv4 3 
92.255.85.131
Details IPv4 2 
62.182.156.182
Details IPv4 1 
2.56.56.215
Details IPv4 1 
188.40.209.107
Details Url 1 
http://www.gerlom.online/9g6m
Details Url 1 
http://www.sabutl.online/n3p2
Details Url 1 
http://www.becbares.com/sa3t
Details Url 1 
http://www.emonk.xyz/c3f6
Details Url 1 
http://www.athrea.xyz/ob61
Details Url 1 
http://www.butuns.com/b4t9
Details Url 2 
http://www.strikco.link/s11o
Details Url 1 
http://www.sepal.online/ct12
Details Url 2 
http://www.posetac.online/dv9n
Details Url 1 
http://www.wromie.xyz/g0d1
Details Url 1 
http://www.cutos2.com/qwg3
Details Url 1 
http://www.banypi.online/t0y7
Details Url 1 
http://www.ceser33.com/g42t
Details Url 1 
http://www.motometics.com/i638
Details Url 1 
http://www.ycov.online/ig34
Details Url 1 
http://www.emaxpy.xyz/ch24
Details Url 1 
http://www.eihncuz.online/h4d0
Details Url 1 
http://www.bamko.link/og2w
Details Url 1 
http://www.niywest.online/d17y
Details Url 1 
http://www.abevot.xyz/gd02
Details Url 3 
http://www.haztol.xyz/n62s
Details Url 1 
http://www.r4search.com/nv6i
Details Url 1 
http://www.satgerv.online/kz21
Details Url 1 
http://secure01-redirect.net/gc1/fre.php
Details Url 2 
http://secure01-redirect.net/gb29/fre.php
Details Url 2 
http://secure01-redirect.net/gb28/fre.php
Details Url 1 
http://secure01-redirect.net/gb18/fre.php
Details Url 1 
http://rfsfju.xyz/blsdxx/fre.php
Details Url 1 
http://moneyfinders.xyz/cjay/loki/fre.php
Details Url 1 
http://mail.jithiadaproperties.com/swtnvmbr/logs/fre.php
Details Url 1 
http://hdmibonquet.ir/oluwa/five/fre.php
Details Url 1 
http://hdmibonquet.ir/oge/five/fre.php
Details Url 1 
http://2.56.56.215/godplan/fre.php
Details Url 1 
http://188.40.209.107/~main/.kavfjaxh8kgzc/fre.php
Details Url 1 
http://artstyle.top
Details Url 4 
http://ad-postback.biz