Revisiting The Bunitu Trojan | Malwarebytes Labs
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Software - T1592.002 Connection Proxy - T1090 Rundll32 - T1085
Show in Graph
Common Information
Type Value
UUID bc57acb1-3065-4c5e-b0b1-701f85f8a6b7
Fingerprint fca3f05ca8a647aa
Analysis status DONE
Considered CTI value 0
Text language
Published July 13, 2015, midnight
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 18, 2024, 1:25 p.m.
Headline Revisiting The Bunitu Trojan
Title Revisiting The Bunitu Trojan | Malwarebytes Labs
Detected Hints/Tags/Attributes 46/2/12
Source URLs
Redirection Url
Details Source https://blog.malwarebytes.com/threat-analysis/2015/07/revisiting-the-bunitu-trojan/
URL Provider
Details Provider Source level domain
Details malwarebytes.com blog.malwarebytes.com
Attributes
Details Type #Events CTI Value
Details File 1 
july1.exe
Details File 57 
installer.exe
Details File 1 
lithiasis.dll
Details File 1 
stub_unpacked.exe
Details File 2 
ynfucvu.dll
Details File 1 
activitiesinstaller.exe
Details File 1 
nsn4cb0.tmp
Details File 1 
nse474e.tmp
Details File 1 
__intelerino.dll
Details File 1021 
rundll32.exe
Details md5 2 
542f7b96990de6cd3b04b599c25ebe57
Details md5 2 
1bf287bf6cbe4d405983d1431c468de7