Analyzing Malwares Using Microsoft Tools
Tags
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Hooking - T1617 Malware - T1587.001 Malware - T1588.001 Tool - T1588.002 Hooking - T1179 Rootkit - T1014 Scripting - T1064 Hooking Rootkit Scripting
Show in Graph
Common Information
Type Value
UUID c4a7daec-57bc-4248-893d-5ff9004f82c6
Fingerprint 3d0ddd51a435af91
Analysis status DONE
Considered CTI value 0
Text language
Published April 29, 2010, 3:04 p.m.
Added to db Jan. 18, 2023, 11:14 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Analyzing Malwares Using Microsoft Tools
Title Analyzing Malwares Using Microsoft Tools
Detected Hints/Tags/Attributes 29/1/6
Source URLs
Redirection Url
Details Source https://www.forcepoint.com/blog/security-labs/analyzing-malwares-using-microsoft-tools
URL Provider
Details Provider Source level domain
Details forcepoint.com www.forcepoint.com
Attributes
Details Type #Events CTI Value
Details Domain 29 
msdl.microsoft.com
Details File 1122 
svchost.exe
Details File 1 
userdump.exe
Details File 130 
ws2_32.dll
Details File 146 
wininet.dll
Details Url 6 
http://msdl.microsoft.com/download/symbols