File: 52b9497beb946d0f13a749f0e29ef2ac
Metadata
| ef5046abc30f239961705305b37ce77a4edc0bd97b1ebdc9a7602bf44d9b8ba7_1524666330518_part-001.html | |
| HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators | 43284 bytes |
| 2018-04-25 15:26:19 | |
| 52b9497beb946d0f13a749f0e29ef2ac | |
| 86902842a40d18c31cf0a14095dce67a097be073 | |
| ef5046abc30f239961705305b37ce77a4edc0bd97b1ebdc9a7602bf44d9b8ba7 | |
| e1f9207b9e144beca1878dc2a064de55e45abf1b51142b66e2f13e9821a946e99fc73f7d4a7d1289dc4152785ce60edfa53c9b9308ed1fcbd2bd34e69dccf843 | |
| N/A | |
| N/A | |
| N/A | |
APTNotes
Cyber threat intelligence reports associated with 52b9497beb946d0f13a749f0e29ef2ac.
Cyber threat intelligence reports associated with 52b9497beb946d0f13a749f0e29ef2ac.
Domains
Domains the malware sample communicates with.
Domains the malware sample communicates with.
Hosts
Hosts the malware sample communicates with.
Hosts the malware sample communicates with.
HTTP Requests
HTTP requests the malware sample makes.
HTTP requests the malware sample makes.
AV Detections
AV detection names associated with the malware sample.
AV detection names associated with the malware sample.
Mutants
Mutants created by the malware sample.
Mutants created by the malware sample.
| "\Sessions\1\BaseNamedObjects\Local\_!MSFTHISTORY!_" |
| "\Sessions\1\BaseNamedObjects\Local\c:!users!%OSUSER%!appdata!local!microsoft!windows!temporary internet files!content.ie5!" |
| "\Sessions\1\BaseNamedObjects\Local\c:!users!%OSUSER%!appdata!roaming!microsoft!windows!cookies!" |
| "\Sessions\1\BaseNamedObjects\Local\c:!users!%OSUSER%!appdata!local!microsoft!windows!history!history.ie5!" |
| "\Sessions\1\BaseNamedObjects\Local\WininetStartupMutex" |
| "\Sessions\1\BaseNamedObjects\Local\WininetConnectionMutex" |
| "\Sessions\1\BaseNamedObjects\Local\WininetProxyRegistryMutex" |
| "\Sessions\1\BaseNamedObjects\Local\!BrowserEmulation!SharedMemory!Mutex" |
| "\Sessions\1\BaseNamedObjects\Local\ZoneAttributeCacheCounterMutex" |
| "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex" |
| "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex" |
| "\Sessions\1\BaseNamedObjects\RasPbFile" |
| "\Sessions\1\BaseNamedObjects\ConnHashTable<3448>_HashTable_Mutex" |
| "\Sessions\1\BaseNamedObjects\Local\ZonesCounterMutex" |
| "\Sessions\1\BaseNamedObjects\Local\!IETld!Mutex" |
| "\Sessions\1\BaseNamedObjects\Local\c:!users!%OSUSER%!appdata!roaming!microsoft!windows!ietldcache!" |
| "\Sessions\1\BaseNamedObjects\Local\RSS Eventing Connection Database Mutex 00000d78" |
| "\Sessions\1\BaseNamedObjects\Local\Feed Eventing Shared Memory Mutex S-1-5-21-4162757579-3804539371-4239455898-1000" |
| "\Sessions\1\BaseNamedObjects\Local\Feed Arbitration Shared Memory Mutex [ User : S-1-5-21-4162757579-3804539371-4239455898-1000 ]" |
| "\Sessions\1\BaseNamedObjects\Local\Feeds Store Mutex S-1-5-21-4162757579-3804539371-4239455898-1000" |
Registry keys
Registry keys created by the malware sample.
Registry keys created by the malware sample.
Comments
User comments about 52b9497beb946d0f13a749f0e29ef2ac.
User comments about 52b9497beb946d0f13a749f0e29ef2ac.
