Security Alert: Attackers Using Script Injection to Spread Bitcoin-Mining Malware
Tags
attack-pattern: Data Code Signing - T1553.002 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Code Signing - T1116
Show in Graph
Common Information
Type Value
UUID ca50e688-3c87-4ecc-8bd8-d9f8a20898aa
Fingerprint 8c4b10b98936e3df
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 20, 2018, 1:23 p.m.
Added to db Jan. 18, 2023, 9:46 p.m.
Last updated Sept. 1, 2024, 9:46 a.m.
Headline Security Alert: Attackers Using Script Injection to Spread Bitcoin-Mining Malware
Title Security Alert: Attackers Using Script Injection to Spread Bitcoin-Mining Malware
Detected Hints/Tags/Attributes 34/1/2
Source URLs
Redirection Url
Details Source https://heimdalsecurity.com/blog/security-alert-attackers-using-script-injection-to-spread-bitcoin-mining-malware/
URL Provider
Details Provider Source level domain
Details heimdalsecurity.com heimdalsecurity.com
Attributes
Details Type #Events CTI Value
Details File 1 
setup_sex_game.exe
Details sha1 1 
9fb7fd71bb7da9c256e872cb56e3808e811990bb