Continue to distribute malware related to cryptocurrency exchange
Tags
Common Information
Type | Value |
---|---|
UUID | 9e228a6f-b589-494d-8ca5-456594dae6e2 |
Fingerprint | a006b97d8fe327c3 |
Analysis status | DONE |
Considered CTI value | 2 |
Text language | |
Published | June 22, 2018, 12:06 a.m. |
Added to db | Jan. 30, 2023, 4:32 p.m. |
Last updated | Nov. 18, 2024, 1:38 a.m. |
Headline | |
Title | Continue to distribute malware related to cryptocurrency exchange |
Detected Hints/Tags/Attributes | 44/2/78 |
Source URLs
URL Provider
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | Domain | 4 | falcancoin.io |
|
Details | Domain | 1 | itaddnet.com |
|
Details | Domain | 2 | tpddata.com |
|
Details | Domain | 1 | wifispeedcheck.net |
|
Details | Domain | 1 | sfacor.com |
|
Details | Domain | 1 | www.marmarademo.com |
|
Details | Domain | 1 | www.33cow.com |
|
Details | Domain | 1 | www.97nb.net |
|
Details | Domain | 1 | www.anlway.com |
|
Details | Domain | 1 | arc.search |
|
Details | Domain | 1 | www.apshenyihl.com |
|
Details | Domain | 1 | www.ap8898.com |
|
Details | Domain | 1 | www.aloe-china.com |
|
Details | Domain | 1 | www.92myhw.com |
|
Details | Domain | 1 | www.aisou123.com |
|
Details | Domain | 1 | markcoprintandcopy.com |
|
Details | Domain | 1 | aedlifepower.com |
|
Details | Domain | 1 | 919xy.com |
|
Details | Domain | 2 | www.pakteb.com |
|
Details | Domain | 2 | www.nuokejs.com |
|
Details | Domain | 2 | www.qdbazaar.com |
|
Details | Domain | 145 | www.us-cert.gov |
|
Details | File | 1260 | explorer.exe |
|
Details | File | 2127 | cmd.exe |
|
Details | File | 1 | prof3.db |
|
Details | File | 1 | prof6.db |
|
Details | File | 1 | conf3.dat |
|
Details | File | 1 | conf6.dat |
|
Details | File | 1 | profile_2.dmg |
|
Details | File | 1 | profile_4.dmg |
|
Details | File | 2 | gcoin2.swf |
|
Details | File | 1 | gcoin4.swf |
|
Details | File | 1 | extend.php |
|
Details | File | 6 | control.php |
|
Details | File | 1 | sglistview.php |
|
Details | File | 26 | class.php |
|
Details | File | 5 | bottom.php |
|
Details | File | 1 | inc_common.php |
|
Details | File | 11 | common.php |
|
Details | File | 3 | helper.php |
|
Details | File | 31 | image.php |
|
Details | File | 23 | about.php |
|
Details | File | 5 | left.php |
|
Details | File | 9 | footer.php |
|
Details | md5 | 1 | 631f1c63ff87399e5e73c7d94d62532f |
|
Details | md5 | 1 | 87e252e3da6c02bf531a6cfb788f122a |
|
Details | md5 | 1 | 2898a8bb7cc7639b7bd1080f9ad00e79 |
|
Details | md5 | 1 | 2228fea495bee51dc88c1a0ed953450a |
|
Details | md5 | 1 | 06cfc6cda57fb5b67ee3eb0400dd5b97 |
|
Details | md5 | 1 | 69ad5bd4b881d6d1fdb7b19939903e0b |
|
Details | md5 | 1 | cf09201f02f2edb9c555942a2d6b01d4 |
|
Details | md5 | 1 | e8bf331858b173eac8bd2b2227821022 |
|
Details | md5 | 1 | 71c78b84f0153ba64d30ea986c3e682b |
|
Details | md5 | 1 | 298a17c20a517dc02bc5388bc645837d |
|
Details | md5 | 1 | a43dfbfad77b5aa974cd475744ab8182 |
|
Details | md5 | 1 | 23f8a0c5efb2ca33e389e0a3d98c254e |
|
Details | md5 | 1 | 912f87392a889070dbb1097a82ccd93f |
|
Details | md5 | 1 | 778a7ed1aa3ce2d8eb719765cac3c166 |
|
Details | md5 | 1 | eb6275a24d047e3be05c2b4e5f50703d |
|
Details | md5 | 1 | a6d1424e1c33ac7a95eb5b92b923c511 |
|
Details | md5 | 1 | aa7f506b0c30d76557c82dba45116ccc |
|
Details | md5 | 1 | 786124b0d0845785c0d156e400ff3e8d |
|
Details | md5 | 1 | 667cf9e8ec1dac7812f92bd77af702a1 |
|
Details | md5 | 1 | 361c2c5be75439dda958daa6032cab49 |
|
Details | md5 | 1 | a7c804b62ae93d708478949f498342f9 |
|
Details | md5 | 1 | 86685ec8c3c717aa2a9702e2c9dec379 |
|
Details | Url | 1 | https://itaddnet.com/res/prof3.db |
|
Details | Url | 1 | https://itaddnet.com/res/prof6.db |
|
Details | Url | 1 | https://tpddata.com/skins/skin-8.thm |
|
Details | Url | 1 | https://tpddata.com/skins/skin-6.thm |
|
Details | Url | 1 | https://wifispeedcheck.net/upload/conf3.dat |
|
Details | Url | 1 | https://wifispeedcheck.net/upload/conf6.dat |
|
Details | Url | 1 | https://sfacor.com/upload/profile_2.dmg |
|
Details | Url | 1 | https://sfacor.com/upload/profile_4.dmg |
|
Details | Url | 2 | https://tpddata.com/flash/gcoin2.swf |
|
Details | Url | 2 | https://tpddata.com/flash/gcoin4.swf |
|
Details | Url | 1 | https://securingtomorrow.mcafee.com/mcafee-labs/hidden-cobra-targets-turkish-financial-sector-new-bankshot-implant |
|
Details | Url | 3 | https://www.us-cert.gov/hidden-cobra-north-korean-malicious-cyber-activity |