IoC (TT Malware Log)

Malware の IoC(Indicator)情報

◆注意◆ マルウェア解析専析家向けサイト

     FQDN, URL,IPアドレス等はそのまま掲載しています


** Caution ** Malware expert site

                    FQDN, URL, IP address etc. are posted as they are

Gamarue

【インディケータ情報】

■ハッシュ情報(Sha256) - Gamarue -
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(以上は Talos(CISCO)の情報: 引用元は https://blog.talosintelligence.com/2019/12/threat-roundup-1206-1213.html )


【検索】

google: 0c56ea50a45505f406a4feddcb3b4c055c0d52ca1aa4ca7d8254267fe1e75e52
google: 0f4e733dcf95c9b026b2a081c0bc8883bdcdf8799a31ae2afff8aa12fa980c3f
google: 46e382dadb24dc1dfd6c5ff7faeb088d56a70150ec44015a8370900251b3024e
google: 86251f8acfcf6f5adb20ef8cfb4def27ff42b8248aae488f3a4d3650dda87364
google: 8ffb2571c279e05205e55b169d306f54a574a73c596475f0738593c34dfbb3be
google: 900547463b112df48191a8a950a7375be9c20fb33de917bf5af6d31aa5e5b700
google: 943bdb5be04e4dd27ebf28532a8639eafd6dc7df5e471f733697220a1aee9c93
google: ab2d58efd6a9c50bfab5b0143009dc25ab0f92d7a9d7bcad39f4edbf1ff6b835
google: b291fe03d64db56f2dbd01d71364ed39b2a7b83b61161673bea57ab33c27c7e8
google: bf1a4d2ab6c500f55a8e5d8e9667fc6bfce7cdbd79b2bf9ebbf7a1392ff3956e
google: c865ae6939ddc9a42481a4f2d410a928f11837e807dbd8d6dad867c13b58019e
google: ca47206563a8eb9e402d5f5f957e15bf73d6193985281c38127cc2cdd63bcb64
google: cf5e15aa7027ca86fc3ad768f1684fd619f367c521231970db5a3024230b34f1


【VT検索】

https://www.virustotal.com/gui/file/0c56ea50a45505f406a4feddcb3b4c055c0d52ca1aa4ca7d8254267fe1e75e52
https://www.virustotal.com/gui/file/0f4e733dcf95c9b026b2a081c0bc8883bdcdf8799a31ae2afff8aa12fa980c3f
https://www.virustotal.com/gui/file/46e382dadb24dc1dfd6c5ff7faeb088d56a70150ec44015a8370900251b3024e
https://www.virustotal.com/gui/file/86251f8acfcf6f5adb20ef8cfb4def27ff42b8248aae488f3a4d3650dda87364
https://www.virustotal.com/gui/file/8ffb2571c279e05205e55b169d306f54a574a73c596475f0738593c34dfbb3be
https://www.virustotal.com/gui/file/900547463b112df48191a8a950a7375be9c20fb33de917bf5af6d31aa5e5b700
https://www.virustotal.com/gui/file/943bdb5be04e4dd27ebf28532a8639eafd6dc7df5e471f733697220a1aee9c93
https://www.virustotal.com/gui/file/ab2d58efd6a9c50bfab5b0143009dc25ab0f92d7a9d7bcad39f4edbf1ff6b835
https://www.virustotal.com/gui/file/b291fe03d64db56f2dbd01d71364ed39b2a7b83b61161673bea57ab33c27c7e8
https://www.virustotal.com/gui/file/bf1a4d2ab6c500f55a8e5d8e9667fc6bfce7cdbd79b2bf9ebbf7a1392ff3956e
https://www.virustotal.com/gui/file/c865ae6939ddc9a42481a4f2d410a928f11837e807dbd8d6dad867c13b58019e
https://www.virustotal.com/gui/file/ca47206563a8eb9e402d5f5f957e15bf73d6193985281c38127cc2cdd63bcb64
https://www.virustotal.com/gui/file/cf5e15aa7027ca86fc3ad768f1684fd619f367c521231970db5a3024230b34f1


【ブログ】

◆Threat Roundup for December 6 to December 13 (Talos(CISCO), 2019/12/13)
https://blog.talosintelligence.com/2019/12/threat-roundup-1206-1213.html
https://alln-extcloud-storage.cisco.com/blogs/1/2019/12/tru.json_.txt
https://malware-log.hatenablog.com/entry/2019/12/13/000000_3


【関連まとめ記事】

全体まとめ
 ◆脅威情報 (まとめ)

◆Talos の 1 週間における脅威のまとめ (まとめ)
https://malware-log.hatenablog.com/entry/Talos_Threat