Dreambot 2017 vs. ISFB 2013
Tags
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID fc07dbcc-c9c9-48e9-82cf-4f8f2183b041
Fingerprint a60d195705394743
Analysis status DONE
Considered CTI value 0
Text language
Published March 16, 2018, midnight
Added to db Jan. 18, 2023, 11:18 p.m.
Last updated Nov. 17, 2024, 6:49 p.m.
Headline Dreambot 2017 vs. ISFB 2013
Title Dreambot 2017 vs. ISFB 2013
Detected Hints/Tags/Attributes 45/3/14
Source URLs
Redirection Url
Details Source https://www.fortinet.com/blog/threat-research/dreambot-2017-vs-isfb-2013.html
URL Provider
Details Provider Source level domain
Details fortinet.com www.fortinet.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
ursnif.ao
Details Domain 1 
ursnif.ad
Details File 367 
readme.txt
Details File 1 
format.txt
Details File 1 
crm.exe
Details File 1260 
explorer.exe
Details File 2 
fj.exe
Details File 4 
client32.dll
Details File 2 
client64.dll
Details File 10 
public.key
Details File 2 
client.ini
Details File 10 
64.dll
Details File 57 
installer.exe
Details sha256 1 
87dec0ca98327e49b326c2d44bc35e5b5ecc5a733cdbb16aeca7cba9471a098e