← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Malicious documents spreading Ransomware
WHITE AlienVault 2019-05-29 Modified: 2019-05-29
18
IOCs
MEDIUM VOLUME
Primarily targeting South Korea
ransomware
Indicators of Compromise (3 / 18 total)
All FileHash-SHA256 URL hostname FileHash-MD5 FileHash-SHA1
TYPEINDICATORDESCRIPTIONCREATED
URL http://92.38.135.204/lib2 — 2019-05-29
URL http://202.168.154.158/lib1 — 2019-05-29
URL http://27.102.106.138/lib3 — 2019-05-29
References (3)
↗ https://asec.ahnlab.com/1232 ↗ https://securitycode.tistory.com/115 ↗ https://twitter.com/HONKONE_K/status/1110757861779341313