← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Possible FIN7 VBS delivered via 'Payment overdue' malspam
WHITE FIN7 AlienVault 2020-04-15 Modified: 2020-04-15
5
IOCs
LOW VOLUME
Possible FIN7 VBS delivered via 'Payment overdue' malspam
malwarevbsfin7malspam
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (5)
All domain FileHash-SHA256 FileHash-MD5 FileHash-SHA1
TYPEINDICATORDESCRIPTIONCREATED
domain environmentalist.com — 2020-04-15
domain domenuscdm.com — 2020-04-15
FileHash-SHA256 b08aef18b9eea772c64b751a89a675871e4aba5208f6bc048309962df1a8b01a — 2020-04-15
FileHash-MD5 a0d778574128ff0a25fb217f62b69ca4 — 2020-04-15
FileHash-SHA1 dea62deccc0c854e96732f69e840da1607e55b20 — 2020-04-15
References (2)
↗ https://twitter.com/VK_Intel/status/1250189247895744517 ↗ https://github.com/k-vitali/Malware-Misc-RE/blob/master/2020-04-14-possible-fin7-vbs-ad-js-loader-initial-vk.raw.js