← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Lh , ReduceRight Malware
WHITE adjadex1@gmail.com 2022-04-10 Modified: 2022-05-10
2005
IOCs
HIGH VOLUME
var d=b.dir,e=c&&"parentNode"===d,f=x, f=w, b.b, and d(b) for the first time.
reducerightnumberstringgztj64z90qfregexpr300errorcopyrightdafunctiongafunctionuint8arraydatepathvoidfontfacewoffwoff2sansu1c801c88u20b4u2de02dffua640a69fufe2efe2fu04b004b1lhtrackeventonceperelementu003e divxgfunctiongtmk6chb3bqueryformclickclosure librarypfunctioncontenttypezfunctionbfunctionmvoidofunctionscriptfragmentxdfunctionlightregularboldverdanasansserifhelveticasltbslsavebutton2arialslh2slh3slsavebuttonxrt2versionxparsefloattypeof bfunctionpseudochildarraywidthsufeffxa0classnullaccept
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Lh ReduceRight
Indicators of Compromise (45 / 2005 total)
All URL hostname FileHash-SHA256 domain FileHash-MD5
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 080cc669ea64a6a25d62aee25aed8b16 — 2022-04-10
FileHash-MD5 114d9797359e8ae0e8c40ffbf76a5ec8 — 2022-04-10
FileHash-MD5 16b9e3392fbed734948199531985338a — 2022-04-10
FileHash-MD5 3d3e1c125acc9625cd4c58e9b6c08f0a — 2022-04-10
FileHash-MD5 5e878b94933f475625476f5975325c60 — 2022-04-10
FileHash-MD5 6cda01adcbbc31c2bdb74cf429231cff — 2022-04-10
FileHash-MD5 6cebb47a09579cfbc8a951066575f2b9 — 2022-04-10
FileHash-MD5 71d590642ec54f857d07402f1f94f681 — 2022-04-10
FileHash-MD5 7d0a37a6daa31934b13a57de5696d67f — 2022-04-10
FileHash-MD5 843522daf92f7bb8b2364a05caae37c6 — 2022-04-10
FileHash-MD5 93c9c3c3fa11d884c82a52895594c74f — 2022-04-10
FileHash-MD5 a03cb20727d69e206351cd67526e9678 — 2022-04-10
FileHash-MD5 a0ce38adb8e867b105476f77a540512a — 2022-04-10
FileHash-MD5 abc69125a85ef37d68cee297dd34ea06 — 2022-04-10
FileHash-MD5 bb6b68211f49d9d1b6eea28a638d0baf — 2022-04-10
FileHash-MD5 bc3a3fd50d9c1bcfdede91c228ebe48a — 2022-04-10
FileHash-MD5 ceee6690341b8a10a13b5530fbc0105c — 2022-04-10
FileHash-MD5 d2c7c8b75f87e31925eab3ae7b75768b — 2022-04-10
FileHash-MD5 d899292055a9c6c92cc3cbfe8fdbba32 — 2022-04-10
FileHash-MD5 d9b93c59f40ace7d9b366641dd70e267 — 2022-04-10
FileHash-MD5 f36a9cd6df3fda41310e1618d8588a4d — 2022-04-10
FileHash-MD5 f3bbc8397353a53abfdefa7d203e8165 — 2022-04-10
FileHash-MD5 fd92e5b770ed6ed39eaaaf7fb25c9595 — 2022-04-10
FileHash-MD5 0ff6773ee4ee63339578903894bf567f — 2022-04-10
FileHash-MD5 144bc5b2a7e66beee97b38bc4f46668f — 2022-04-10
FileHash-MD5 421066040d53442dd00da54466a6629b — 2022-04-10
FileHash-MD5 445ba07d33864a1ccef8dc8cda84266c — 2022-04-10
FileHash-MD5 5b4438e778420215b2d733eca8d44fb0 — 2022-04-10
FileHash-MD5 68831417c931861d4abb41686744eec6 — 2022-04-10
FileHash-MD5 6d12e42f4112549ab3c6d5d7b6d7728f — 2022-04-10
FileHash-MD5 71d7e784019550a64b302154673b19d4 — 2022-04-10
FileHash-MD5 7b0709dd0b139727d14e77c6addd7548 — 2022-04-10
FileHash-MD5 83801b2044811c0363da78eefe2b866c — 2022-04-10
FileHash-MD5 92b7ad3762c911552455246457a0b653 — 2022-04-10
FileHash-MD5 9898816ce3218892c0a0a8805ae8a77f — 2022-04-10
FileHash-MD5 a76cc9c7e014b3742b1ecbf7c361ce28 — 2022-04-10
FileHash-MD5 adad0e88440d0c66f71d2fef30db7889 — 2022-04-10
FileHash-MD5 ae7339fcc91296eab413615941f3eebd — 2022-04-10
FileHash-MD5 c844e5f3ce81872126f1459df0fa4ca7 — 2022-04-10
FileHash-MD5 c9235a0bf2c9e38182ee32c24a10200e — 2022-04-10
FileHash-MD5 d32662b76e199f382f3f5a3c0ab5be9a — 2022-04-10
FileHash-MD5 e332dfe73d81e8a715229ae4e9c77205 — 2022-04-10
FileHash-MD5 ef1226318a7e1811576972befaa7c661 — 2022-04-10
FileHash-MD5 f771054a5d002a771ca74064ef3e7af4 — 2022-04-10
FileHash-MD5 290c8f87dddf45e3a65e0baf08b25d02 — 2022-04-10
References (11)
↗ xfe-URL-ketoluqidslim.us-stix2-2.1-export.json ↗ https://nertiob.pw/lander/us-leanstartketov8-pre2-cryp.im/assets/7bf60781816875acb6c04aa4f706c4ad.js ↗ https://nertiob.pw/lander/us-leanstartketov8-pre2-cryp.im/assets/af74c0184a1151090f275e5d06fe0387.js ↗ https://nertiob.pw/lander/us-leanstartketov8-pre2-cryp.im/assets/63c9d725454afa40dc86453f4a52812f.css ↗ https://nertiob.pw/lander/us-leanstartketov8-pre2-cryp.im/assets/a36a95c9dccfd8d0b6ccb62ed162150a.css ↗ https://www.googletagmanager.com/gtag/js?id=G-ZTJ64Z90QF&l=dataLayer&cx=c ↗ https://www.googleoptimize.com/optimize.js?id=OPT-MTGSVG5 ↗ https://www.google-analytics.com/analytics.js ↗ https://www.googletagmanager.com/gtm.js?id=GTM-K6CHB3B ↗ https://fonts.googleapis.com/css2?family=Open+Sans&family=Oswald:wght@400;600;700&family=Roboto+Condensed:wght@400;700&display=swap ↗ xfe-URL-nertiob.pw-stix2-2.1-export.json