Skip to content
Permalink
master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?

Malware-Misc-RE/2019-03-13-Dridex-Loader-40200-Unpacked-VK-MISP.csv

Go to file
 
 
Cannot retrieve contributors at this time
19 lines (18 sloc) 5.99 KB
Raw Blame
Open in GitHub Desktop
uuid event_id category type value comment to_ids date object_relation attribute_tag object_uuid object_name object_meta_category event_info event_member_org event_source_org event_distribution event_threat_level_id event_analysis event_date event_tag event_timestamp
5c895611-7ef8-4858-b545-257d68f8e8cf 279 Network activity url 209.141.34.8/test1.exe Dridex Download Link 1 1552504337 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c895681-db4c-45ff-a337-40e968f8e8cf 279 Network activity url 89.22.103.32:3389 Dridex First Layer Net 1 1552504449 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c895681-4568-4bd6-815c-40e968f8e8cf 279 Network activity url 37.59.1.74:3389 Dridex First Layer Net 1 1552504449 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c895681-4864-49e7-a631-40e968f8e8cf 279 Network activity url 104.131.7.40:443 Dridex First Layer Net 1 1552504449 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c895681-4c8c-40e4-b03a-40e968f8e8cf 279 Network activity url 95.211.148.20:1443 Dridex First Layer Net 1 1552504449 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c89563b-ca54-4e2b-8d98-40c568f8e8cf 279 Payload delivery malware-sample cf32d737ae76356c900b165c8a04d86d1100978e8e77b21569218de0f72b6c34|97cf74bec808d8be72a60292ecdbb3c3 1 1552504379 malware-sample 5c89563a-7bd4-44c8-9158-40c568f8e8cf file file 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c89563b-3df0-421a-b3ac-40c568f8e8cf 279 Payload delivery filename cf32d737ae76356c900b165c8a04d86d1100978e8e77b21569218de0f72b6c34 0 1552504379 filename 5c89563a-7bd4-44c8-9158-40c568f8e8cf file file 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c89563b-b390-4d3b-a8f1-40c568f8e8cf 279 Payload delivery md5 97cf74bec808d8be72a60292ecdbb3c3 1 1552504379 md5 5c89563a-7bd4-44c8-9158-40c568f8e8cf file file 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c89563b-4270-4314-acaa-40c568f8e8cf 279 Payload delivery sha1 efa6bae89ffd9a2ac87ba71173759fb3097abe37 1 1552504379 sha1 5c89563a-7bd4-44c8-9158-40c568f8e8cf file file 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c89563b-b210-43d3-9bea-40c568f8e8cf 279 Payload delivery sha256 cf32d737ae76356c900b165c8a04d86d1100978e8e77b21569218de0f72b6c34 1 1552504379 sha256 5c89563a-7bd4-44c8-9158-40c568f8e8cf file file 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c89563b-07a8-4493-95e0-40c568f8e8cf 279 Other size-in-bytes 37888 0 1552504379 size-in-bytes 5c89563a-7bd4-44c8-9158-40c568f8e8cf file file 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c89564d-5764-4e88-a4a5-258068f8e8cf 279 Payload delivery malware-sample 2019-03-13-dridex-loader-unpacked.vk.dll|62ecfeef68eeb45a8712c79992b5b2e9 1 1552504397 malware-sample 5c89564d-74ec-429d-954a-258068f8e8cf file file 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c89564d-9840-4ed4-87d2-258068f8e8cf 279 Payload delivery filename 2019-03-13-dridex-loader-unpacked.vk.dll 0 1552504397 filename 5c89564d-74ec-429d-954a-258068f8e8cf file file 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c89564d-96bc-4070-a3ab-258068f8e8cf 279 Payload delivery md5 62ecfeef68eeb45a8712c79992b5b2e9 1 1552504397 md5 5c89564d-74ec-429d-954a-258068f8e8cf file file 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c89564d-4dbc-4b60-beeb-258068f8e8cf 279 Payload delivery sha1 3d9da5e5aff5bb09099957aa793aa139bcced706 1 1552504397 sha1 5c89564d-74ec-429d-954a-258068f8e8cf file file 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c89564d-5f80-4e31-bc16-258068f8e8cf 279 Payload delivery sha256 53f4b14014311814b14847a1851e0652182615b262a11abe86b8bd6a2483e027 1 1552504397 sha256 5c89564d-74ec-429d-954a-258068f8e8cf file file 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449
5c89564d-d498-4ef2-9527-258068f8e8cf 279 Other size-in-bytes 89600 0 1552504397 size-in-bytes 5c89564d-74ec-429d-954a-258068f8e8cf file file 2019-03-13: Dridex "40200" Malspam VK-Intel VK-Intel 1 Medium 0 2019-03-13 Malware: Dridex Banker,"40200",malspam,Spam Theme: Resume 1552504449