CSS-JS Steganography in Fake Flash Player Update Malware
Tags
country: Canada Germany Italy
maec-delivery-vectors: Watering Hole
attack-pattern: Data Ip Addresses - T1590.005 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Steganography - T1001.002 Steganography - T1406.001 Steganography - T1027.003 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 9e58fc51-4851-4281-9f9d-0148ebc9aadb
Fingerprint 84c1a9910de70641
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 2, 2020, 6:17 a.m.
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline CSS-JS Steganography in Fake Flash Player Update Malware
Title CSS-JS Steganography in Fake Flash Player Update Malware
Detected Hints/Tags/Attributes 61/3/31
Source URLs
Redirection Url
Details Source https://blog.sucuri.net/2020/11/css-js-steganography-in-fake-flash-player-update-malware.html
URL Provider
Details Provider Source level domain
Details sucuri.net blog.sucuri.net
Attributes
Details Type #Events CTI Value
Details Domain 15 
google-analytics.com
Details Domain 538 
pic.twitter.com
Details Domain 41 
www.google-analytics.com
Details Domain 1 
priangan.com
Details Domain 1 
lebs.site
Details Domain 1 
static.xx.fbcdn.net.com
Details Domain 4 
static.xx.fbcdn.net
Details Domain 1 
polobear.shop
Details Domain 1 
lopiax.us
Details Domain 2 
geoip.inc
Details Domain 1 
tierretyr.live
Details Domain 1 
pp-login-alert.com
Details Domain 1 
dorcsign.cloud
Details Domain 1 
doscug.live
Details Domain 1 
www.ehb-onlinebank.ml
Details Domain 1 
halifax-alerts.com
Details Domain 1 
ing-app-nl.me
Details Domain 1 
techvita.biz
Details File 75 
favicon.ico
Details File 218 
min.js
Details File 40 
jquery.js
Details File 1206 
index.php
Details File 5 
fonts.css
Details File 1 
adobeflpl_installer.zip
Details File 2 
generate.php
Details File 101 
gate.php
Details File 3 
geoip.dat
Details File 2 
geoip.inc
Details File 86 
admin.php
Details IPv4 1 
162.0.235.12
Details Url 1 
https://techvita.biz/pl341/panel/admin.php