-
Notifications
You must be signed in to change notification settings - Fork 1
/
LockyViaDDE.feed
39 lines (39 loc) · 8.71 KB
/
LockyViaDDE.feed
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
{
"feedinfo": {
"provider_url": "https://intelgraph.verisign.com/#/node/intelligence_alert/view/4bb5540d-d8de-4d48-a3ed-2bd4b7ce3986?source=email",
"display_name": "LockyViaDDE",
"name": "LockyViaDDE",
"tech_data": "iDefense observed large spam campaign with over 2,000 emails that contains malicious Microsoft Word attachment that uses DDE attack method to deliver Locky ransomware via intermediate QT Downloader to the victims.",
"summary": "Malicious DDE Word Document Delivers Locky Ransomware via QT Downloader ",
"icon": "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"
},
"reports": [
{
"title": "LockyViaDDE",
"timestamp": 1509991102,
"iocs": {
"dns": [
"toundlefa.net/",
"h1854684.stratoserver.net/niueyft38",
"hobbystube.net/niueyft38",
"epcb.it/niueyft38",
"fuettern24.de/niueyft38",
"dvprojekt.hr/niueyft38",
"pciholog.ru/jhfry3766",
"hilaryandsavio.com/kjhuAT61"
],
"md5": [
"386f7e1e54a4e3b887d4c2fcd6d4165f",
"e526c81e2c7e498eb5fd15a1ba2d49a2",
"f436a9edea4cb3df6193715c105fcffe",
"94124f785b710373e86b154c74a6f2af",
"fa056ee1541c59f74e9259c6c381ed75",
"ab297c980fab4999fbd1bda1728e023a"
]
},
"score": 100,
"link": "https://intelgraph.verisign.com/#/node/intelligence_alert/view/4bb5540d-d8de-4d48-a3ed-2bd4b7ce3986?source=email",
"id": "4d495a4db3362f8904458a90f521b89e"
}
]
}