| 1 |
InQuest |
🤖 Malicious RTF document found hosted at:
hxxp://75.127.1.211/win/document.doc
SHA256: 8f4d7f30df80f8814ab6adce75b93a2b6543d4c264ef45bc0840bcba7a856ab3
Original carrier: https://labs.inquest.net/dfi/hash/38541fe08c3a6bcc05f8571bd2a46beedb8cc2939c7d0d3e51746551b9c2a64d
|
2020-10-29 22:51:12 |
| 2 |
HeliosCert |
@HeliosCert
Sample analysed on #virustotal
VirusTotal-Score: 60
VirusTotal: https://www.virustotal.com/gui/file/63d7d60f6f166a7e83d107adb59fd83bc2f49b9d5097294ddf7a45bf5535a40c/detection/f-63d7d60f6f166a7e83d107adb59fd83bc2f49b9d5097294ddf7a45bf5535a40c-1598946044
Threat: Ransom_WCRY.SMALYM (TrendMicro)
|
2020-10-29 22:30:02 |
| 3 |
m0rb |
2020-10-29T22:21:52 - Commented: https://www.virustotal.com/gui/file/b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605/community #malware #commandinjection
|
2020-10-29 22:21:53 |
| 4 |
Cryptolaemus1 |
E1 (2154/2154)
CreateDate:2020:10:29 21:46:00 DOCX
red_dawn
190.202.229.74:80
https://tria.ge/201029-kz8ntr67dx
https://capesandbox.com/analysis/81059/
https://app.any.run/tasks/a4444e5b-dd47-4434-a57d-f24fcd5751d3 https://twitter.com/Cryptolaemus1/status/1321940029510471682/photo/1
|
2020-10-29 22:20:38 |
| 5 |
Cryptolaemus1 |
E2 (2142/2142)
CreateDate:2020:10:29 21:34:00 DOCX
upgrade_blue
102.182.145.130:80
https://tria.ge/201029-plzd4dzecx
https://capesandbox.com/analysis/81060/
https://app.any.run/tasks/ac55d057-5b27-41f7-a95a-98591327e9bd https://twitter.com/Cryptolaemus1/status/1321939860152819714/photo/1
|
2020-10-29 22:19:57 |