Trusted Design

Aggressive Malware Pushers: Prolific Cyber Surfers Beware

概要

On April 19, Cyphort hardware sandbox trolled over a site www.49lou.com that served up 83 pieces of Windows executable files (EXE and DLL binaries) with zero user interaction. By now, most of the malware researchers are used to seeing drive-by infections that serve up a handful of malware, from droppers to payloads. However, getting 83 pieces in one shot is way too “generous” by any account and it surely peaked the interest of our researchers. For the security minded: How did this happen? What are those binary pieces? What does this tell us and what can we do for better protection? In this article, we share all our findings along these lines. - See more at: http://www.cyphort.com/aggressive-malware-pushers-prolific-cyber-surfers-beware/#sthash.x76DAv2g.dpuf

Created: 2026-02-23

Indicators

• hostname - kan.jieaojs.com -
• CVE - CVE-2014-6332 -
• hostname - wangba.jieaojs.com -
• FileHash-SHA256 - 4b46d598593573f71709d446158efe6808a08996748e6a16256688d2127b526c -
• FileHash-SHA256 - 5f0f761aa74d7abc742c7f3e1cf7f1b67539e2a289cfad75216d777e10a94c4b -

類似Pulses

• PowerSniff Malware Used in Macro-based Attacks (score: 0.68)
• Lazarus group: Operation Blockbuster (score: 0.66)
• Dyre Malware Campaigners Innovate with Distribution Techniques (score: 0.66)
• When ELF.BillGates met Windows (score: 0.65)
• Malware leverages Windows Management Instrumentation (WMI) (score: 0.65)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る