This worm spreads a fileless version of the Trojan Bladabindi
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Software - T1592.002 Vulnerabilities - T1588.006 Powershell - T1086 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID d2e6fcc5-10cd-4f01-a80a-041f20d70f98
Fingerprint 8cbced2b97a3e745
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 27, 2018, midnight
Added to db Jan. 19, 2023, 12:02 a.m.
Last updated Oct. 15, 2024, 5:14 p.m.
Headline This worm spreads a fileless version of the Trojan Bladabindi
Title This worm spreads a fileless version of the Trojan Bladabindi
Detected Hints/Tags/Attributes 63/2/3
Source URLs
Redirection Url
Details Source https://www.zdnet.com/article/this-worm-spreads-fileless-trojan-bladabindi-through-removable-drives/
URL Provider
Details Provider Source level domain
Details zdnet.com www.zdnet.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
serverwater-boom.duckdns.org
Details Domain 23 
hopto.org
Details Domain 8 
myftp.biz