ASEC Weekly Malware Statistics (February 21st, 2022 - February 27th, 2022) - ASEC BLOG
Tags
| country: | India |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Domains - T1583.001 Domains - T1584.001 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 9eb5e9d9-cc08-41c1-8bf8-6efc4cce0d3b |
| Fingerprint | ed0e3d688deb02b1 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | March 3, 2022, 10:46 a.m. |
| Added to db | Sept. 11, 2022, 4:59 p.m. |
| Last updated | Nov. 17, 2024, 6:49 p.m. |
| Headline | ASEC Weekly Malware Statistics (February 21st, 2022 – February 27th, 2022) |
| Title | ASEC Weekly Malware Statistics (February 21st, 2022 - February 27th, 2022) - ASEC BLOG |
| Detected Hints/Tags/Attributes | 39/3/103 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://asec.ahnlab.com/en/32293/ |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | www.high-clicks.com |
|
| Details | Domain | 1 | www.bamboop.xyz |
|
| Details | Domain | 1 | www.ammarus.com |
|
| Details | Domain | 2 | www.gobits3.com |
|
| Details | Domain | 2 | www.ocvcoins.com |
|
| Details | Domain | 1 | www.setlyon.xyz |
|
| Details | Domain | 1 | www.fykori.xyz |
|
| Details | Domain | 4 | www.hughers3.com |
|
| Details | Domain | 3 | www.funtabse.com |
|
| Details | Domain | 1 | www.solten.online |
|
| Details | Domain | 1 | www.dashmints.com |
|
| Details | Domain | 4 | www.besrbee.com |
|
| Details | Domain | 1 | www.trc-clicks.com |
|
| Details | Domain | 2 | www.moreosin.com |
|
| Details | Domain | 1 | mail.aquariushotelboutique.com |
|
| Details | Domain | 1 | aquariushotelboutique.com |
|
| Details | Domain | 1 | mail.translogship.co.in |
|
| Details | Domain | 1 | translogship.co.in |
|
| Details | Domain | 4 | contrivekota.in |
|
| Details | Domain | 1 | mail.wpl-india.com |
|
| Details | Domain | 1 | wpl-india.com |
|
| Details | Domain | 1 | afripot.buzz |
|
| Details | Domain | 10 | secure01-redirect.net |
|
| Details | Domain | 2 | calomdule.gq |
|
| Details | Domain | 1 | brokenskulltechnologies.tk |
|
| Details | Domain | 1 | 75bccc18b4d1631c2ecda542c872db27.ga |
|
| Details | Domain | 1 | 250b48d798957fbf33b77ae8a74a45ca.cf |
|
| Details | Domain | 1 | dieselloil.buzz |
|
| Details | 1 | agency@aquariushotelboutique.com |
||
| Details | 1 | bhandary@translogship.co.in |
||
| Details | 4 | hokota@contrivekota.in |
||
| Details | 1 | paras@wpl-india.com |
||
| Details | File | 1 | erato.exe |
|
| Details | File | 1 | rro4665321.exe |
|
| Details | File | 1 | 3028802232022.exe |
|
| Details | File | 1 | aw212504.exe |
|
| Details | File | 1 | scan-po_2002226598543098809326751.exe |
|
| Details | File | 1260 | explorer.exe |
|
| Details | File | 18 | 2022.exe |
|
| Details | File | 47 | order.exe |
|
| Details | File | 11 | form.exe |
|
| Details | File | 1 | 6543981.exe |
|
| Details | File | 1 | job_no_2015986.pdf |
|
| Details | File | 1 | e2202099c2.exe |
|
| Details | File | 1 | attachment_2.bin |
|
| Details | File | 1 | parka.exe |
|
| Details | File | 1 | draft.exe |
|
| Details | File | 28 | list.exe |
|
| Details | File | 8 | bancarios.pdf |
|
| Details | File | 1 | 600019939189_10-02-2022.exe |
|
| Details | File | 35 | invoice.exe |
|
| Details | File | 1 | 2152022.exe |
|
| Details | File | 6 | mq-3019.exe |
|
| Details | File | 1 | qoutation_pdf________________________________________.exe |
|
| Details | File | 1 | rápida.exe |
|
| Details | File | 70 | vbc.exe |
|
| Details | File | 89 | wininit.exe |
|
| Details | File | 82 | fre.php |
|
| Details | md5 | 3 | 75bccc18b4d1631c2ecda542c872db27 |
|
| Details | md5 | 1 | 250b48d798957fbf33b77ae8a74a45ca |
|
| Details | IPv4 | 1 | 107.180.44.132 |
|
| Details | IPv4 | 1 | 103.50.163.138 |
|
| Details | IPv4 | 1 | 148.163.89.221 |
|
| Details | IPv4 | 1 | 2.56.59.31 |
|
| Details | IPv4 | 1 | 95.216.16.35 |
|
| Details | IPv4 | 6 | 94.23.26.20 |
|
| Details | IPv4 | 1 | 91.243.32.162 |
|
| Details | IPv4 | 4 | 91.243.32.101 |
|
| Details | IPv4 | 1 | 45.133.203.40 |
|
| Details | IPv4 | 5 | 193.150.103.37 |
|
| Details | IPv4 | 1 | 185.233.200.90 |
|
| Details | IPv4 | 6 | 185.215.113.83 |
|
| Details | IPv4 | 8 | 185.200.191.18 |
|
| Details | IPv4 | 2 | 116.203.252.195 |
|
| Details | IPv4 | 1 | 91.243.44.101 |
|
| Details | IPv4 | 1 | 91.243.44.90 |
|
| Details | IPv4 | 5 | 91.243.44.142 |
|
| Details | IPv4 | 1 | 91.243.44.200 |
|
| Details | Url | 1 | http://www.high-clicks.com/pvxz |
|
| Details | Url | 1 | http://www.bamboop.xyz/sk6z |
|
| Details | Url | 1 | http://www.ammarus.com/gqvv |
|
| Details | Url | 2 | http://www.gobits3.com/8vrd |
|
| Details | Url | 1 | http://www.ocvcoins.com/uit2 |
|
| Details | Url | 1 | http://www.setlyon.xyz/wm08 |
|
| Details | Url | 1 | http://www.fykori.xyz/os16 |
|
| Details | Url | 1 | http://www.hughers3.com/tk66 |
|
| Details | Url | 3 | http://www.funtabse.com/pout |
|
| Details | Url | 1 | http://www.solten.online/d1s8 |
|
| Details | Url | 1 | http://www.dashmints.com/b0us |
|
| Details | Url | 3 | http://www.besrbee.com/yrcy |
|
| Details | Url | 1 | http://www.trc-clicks.com/p2a5 |
|
| Details | Url | 1 | http://www.moreosin.com/ioxf |
|
| Details | Url | 1 | http://afripot.buzz/oluwa/five/fre.php |
|
| Details | Url | 1 | http://secure01-redirect.net/gd16/fre.php |
|
| Details | Url | 2 | http://secure01-redirect.net/gd13/fre.php |
|
| Details | Url | 3 | http://secure01-redirect.net/gc23/fre.php |
|
| Details | Url | 1 | http://secure01-redirect.net/gc20/fre.php |
|
| Details | Url | 2 | http://calomdule.gq/active/fre.php |
|
| Details | Url | 1 | http://brokenskulltechnologies.tk/bn1/fre.php |
|
| Details | Url | 1 | http://75bccc18b4d1631c2ecda542c872db27.ga/ausin2/fre.php |
|
| Details | Url | 1 | http://250b48d798957fbf33b77ae8a74a45ca.cf/ausin4/fre.php |
|
| Details | Url | 1 | http://2.56.59.31/pureserver/fre.php |
|
| Details | Url | 1 | http://dieselloil.buzz/bobby/five/fre.php |