Search

to the following possibly malicious URL: http://{BLOCKED}189.234:8080/{random path} This report is generated via an automated analysis system. TrojanDownloader:Win32/Kuluoz.B (Microsoft); Generic

}laod.info/rsss/index.php?{random characters} This report is generated via an automated analysis system. PWS:Win32/Yamoz.A (Microsoft); Generic PWS.y!bml (McAfee); Trojan Horse (Symantec); Trojan-PSW.Win32.Agent.ojk

{BLOCKED}.11.204 This report is generated via an automated analysis system. TrojanDownloader:Win32/Drixed.B (Microsoft); Generic BackDoor.u (McAfee); Trojan Horse (Symantec); Trojan.Win32.Yakes.hmhc

{BLOCKED}.11.204 This report is generated via an automated analysis system. TrojanDownloader:Win32/Drixed.B (Microsoft); Generic Downloader.z (McAfee); Trojan Horse (Symantec); Trojan.Win32.Yakes.hlgn

{BLOCKED}e.co.kr/bXN3aW5zY2sub2N4.ocx This report is generated via an automated analysis system. Backdoor:Win32/Blohi.B (Microsoft); Generic BackDoor!fhr (McAfee); Trojan.Gen (Symantec);

Backdoor.Win32.Agent.qkx(Kaspersky), TR/Crypt.ULPM.Gen(Avira), W32/Backdoor2.CRHQ (exact)(F-Prot), Generic BackDoor(McAfee)

file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. NOTES: This is the Trend Micro generic detection for files that targets a Microsoft Excel

report is generated via an automated analysis system. TrojanDownloader:Win32/Renos.DZ (Microsoft); Generic Dropper.cx (McAfee); Trojan Horse (Symantec); Trojan.Win32.Agent.bnqe (Kaspersky);

}cards2005d.unlugar.com/csrs.swf This report is generated via an automated analysis system. TrojanDownloader:Win32/Delf (Microsoft); Generic Downloader.p (McAfee); Downloader.Bancos!gen (Symantec);

}slpoew.asia/update/0pdat3.exe http://{BLOCKED}dbbnennm.in/update/0pdat3.exe This report is generated via an automated analysis system. VirTool:Win32/VBInject.gen!JD (Microsoft); Generic Dropper!1z3 (McAfee); Trojan.Gen (Symantec

through your browser. No installation or download is required. Apache 1.3.x,Apache 2.0.x,Apache 2.2.x Apply associated Trend Micro DPI Rules. 1000552| 1000552 - Generic Cross Site Scripting(XSS) Prevention

filter name when applying appropriate DPI and/or IDF rules. 1000552| 1000552 - Generic Cross Site Scripting(XSS) Prevention

when applying appropriate DPI and/or IDF rules. 1000552| 1000552 - Generic Cross Site Scripting(XSS) Prevention

Foundation Apache HTTP Server 2.2.6 Apply associated Trend Micro DPI Rules. 1000552| 1000552 - Generic Cross Site Scripting(XSS) Prevention

Description Name: CVE-2017-0147 - Information Disclosure Exploit - SMB (Request) . This is the Trend Micro detection for malicious SMB network packet that manifest any of the following actions:ExploitThis attack is used for Point of Entry or Lateral ...

Description Name: CVE-2017-0145 - Remote Code Execution - SMB (Request) . This is the Trend Micro detection for malicious SMB network packet that manifest any of the following actions:ExploitThis attack is used for Point of Entry or Lateral Movement

!C (Microsoft); Generic Obfuscated.g (McAfee); PUA.Gen.2 (Symantec); Trojan.Win32.Generic.pak!cobra (Sunbelt)

(Microsoft); Generic PWS.ahb (McAfee); Trojan-PSW.Win32.Tepfer.cger (Kaspersky); Trojan.Win32.Generic!BT (Sunbelt)

Trojan drops the following files: {malware file path and name} This report is generated via an automated analysis system. Generic Trojan.kj (McAfee); W97M.Downloader (Symantec);

when irc is idle %Windows%\Temp\Cookies\control.ini %Windows%\Temp\Cookies\fullname.txt - list of possible fullnames to be used in connect dialog %Windows%\Temp\Cookies\grup - used to create a random