Hexacorn | Blog Enter Sandbox – part 5: In search for Deus Ex Machina II
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Hooking - T1617 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Visual Basic - T1059.005 Hooking - T1179 Hooking
Show in Graph
Common Information
Type Value
UUID c48947df-9ddc-40cb-a3b6-317a6ff29acc
Fingerprint 1629387a6b5d26f5
Analysis status DONE
Considered CTI value 0
Text language
Published June 17, 2015, midnight
Added to db Jan. 19, 2023, 12:12 a.m.
Last updated Nov. 18, 2024, 1:24 p.m.
Headline UNKNOWN
Title Hexacorn | Blog Enter Sandbox – part 5: In search for Deus Ex Machina II
Detected Hints/Tags/Attributes 45/2/10
Source URLs
Redirection Url
Details Source http://www.hexacorn.com/blog/2015/06/17/enter-sandbox-part-5-in-search-for-deus-ex-machina-ii/
URL Provider
Details Provider Source level domain
Details hexacorn.com www.hexacorn.com
Attributes
Details Type #Events CTI Value
Details Domain 3 
virscan.org
Details Domain 1 
coimbatoreholidays.com
Details File 52 
bcrypt.dll
Details File 2130 
cmd.exe
Details File 258 
net.exe
Details File 165 
reg.exe
Details IPv4 1 
62.210.204.149
Details IPv4 1 
192.185.97.96
Details Url 1 
http://coimbatoreholidays(.)com/images/viny11.pnd
Details Url 1 
http://www(.)coimbatoreholidays(.)com/images/viny11.pnd