Search

Description Name: NEMUCOD - HTTP (Request) - Variant 5 . This is Trend Micro detection for packets passing through HTTP network protocols that can be used as N/A. This also indicates a malware infection. Below are some indicators of an infected host:...

This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users. Arrival Details This Trojan arrives as an attachment to email messages spammed by other

credentials: Username: administrator Password: 123456 password PASSWORD football welcome 1 12 21 123 321 1234 12345 123123 123321 111111 654321 666666 121212 000000 222222 888888 1111 555555 1234567 12345678

444444 44444 33333333 3333333 333333 33333 22222222 2222222 222222 22222 11111111 1111111 111111 11111 00000000 0000000 00000 0987654321 987654321 87654321 7654321 654321 54321 super secret server computer

333333 33333 3333 333 33 3 22222222 2222222 222222 22222 2222 222 22 2 11111111 1111111 111111 11111 1111 111 11 1 00000000 0000000 00000 0000 000 00 0987654321 987654321 87654321 7654321 654321 54321 4321

333333 33333 3333 333 33 3 22222222 2222222 222222 22222 2222 222 22 2 11111111 1111111 111111 11111 1111 111 11 1 00000000 0000000 00000 0000 000 00 0987654321 987654321 87654321 7654321 654321 54321 4321

Description Name: XORBAT - Ransomware - HTTP (Request) . This is Trend Micro detection for packets passing through HTTP network protocols that can be used as N/A. This also indicates a malware infection. Below are some indicators of an infected host:...

qwer1234 mustang 123456 123456a ww123456 1234 123456.com football jessica power q1w2e3r4t5 aaa123 passw0rd 741852 666666 123465 justin !@#$%^&*() 12345 222222 qazwsx123 999999 abc123 tomcat dongdong

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a

edb eml fla flv frm gif gpg gz h hwp ibd iso jar java jpeg jpg js jsp key lay lay6 ldf m3u m4u max mdb mdf mid mkv mml mov mp3 mp4 mpeg mpg msg myd myi nef odb odg odp ods odt onetoc2 ost otg otp ots

123465 justin !@#$%^&*() 12345 222222 qazwsx123 999999 abc123 tomcat dongdong 654321 111111a q1w2e3 dragon 1234560 1234567 asd123456 secret abc123456 master qq123456 1q2w3e playboy P@ssw0rd 123654

passw0rd 741852 666666 123465 justin !@#$%^&*() 12345 222222 qazwsx123 999999 abc123 tomcat dongdong 654321 111111a q1w2e3 dragon 1234560 1234567 asd123456 secret abc123456 master qq123456 1q2w3e playboy

Lectool 1007711* - Ransomware XORBAT Suspicious Server Ransomware Activity 1007582* - Ransomware Lectool-1 Web Application Common 1009319 - ImageMagick 'ReadMATImage' Use After Free Vulnerability

222222 321 5201314 555555 654321 666666 888888 88888888 987654321 999999 a123456 A123456 a123456789 Aa123456 aa123456 Aa123456. Aa12345678 aaaaaa Ab123 abc abc@123 Abc123 abc123 ABCabc123 abcd@1234

666666 121212 0 222222 888888 1111 555555 1234567 12345678 123456789 987654321 admin abc123 abcd1234 abcd@1234 abc@123 p@ssword P@ssword p@ssw0rd P@ssw0rd P@SSWORD P@SSW0RD P@w0rd P@word iloveyou monkey

666666 121212 0 222222 888888 1111 555555 1234567 12345678 123456789 987654321 admin abc123 abcd1234 abcd@1234 abc@123 p@ssword P@ssword p@ssw0rd P@ssw0rd P@SSWORD P@SSW0RD P@w0rd P@word iloveyou monkey

999999 Passw0rd 123qwe!@# football welcome 1 12 21 123 321 1234 12345 123123 123321 111111 654321 666666 121212 0 222222 888888 1111 555555 1234567 12345678 123456789 987654321 admin abc123 abcd1234

654321 666666 121212 000000 222222 888888 1111 555555 1234567 12345678 123456789 987654321 admin abc123 abcd1234 abcd@1234 abc@123 p@ssword P@ssword p@ssw0rd P@ssw0rd P@SSWORD P@SSW0RD P@$$w0rd P@$$word P@

john_1 OSITO1 spq3000 R2-D2 jose_20 none11 David1 vijayb Tortu1 222222 adi12 NickyName apricot18 Alexx1 Gabriel23- Ident1 leo02 Crazy1 lucky1 sabio1 ----JJ---- DANY21 --Tr8tEr-- 0u812 hhh-2 lui20 TeamKuris

HOSTS File Modification This Trojan overwrites the system's HOSTS files to prevent users from accessing the following websites: {BLOCKED}.253.22 008.wzhe123.cn {BLOCKED}.253.22 010389.com {BLOCKED