Top Tweets for #bebloh

over 6 years ago

OPSWAT vs. #Bebloh A trojan horse that modifies security settings in Internet Explorer. BEBLOH’s capabilities include monitoring browsers & doing checks to evade traditional sandboxes. See Bebloh on #OPSWAT MetaDefender Cloud

OPSWAT's tweet photo. OPSWAT vs. #Bebloh

A trojan horse that modifies security settings in Internet Explorer. BEBLOH’s capabilities include monitoring browsers & doing checks to evade traditional sandboxes.

See Bebloh on #OPSWAT MetaDefender Cloud

0

1

0

over 6 years ago

OPSWAT vs. #Bebloh A trojan horse that modifies security settings in Internet Explorer. BEBLOH’s capabilities include monitoring browsers & doing checks to evade traditional sandboxes. See Bebloh on #OPSWAT MetaDefender Cloud

0

3

1

0

over 6 years ago

OPSWAT vs. #Bebloh A trojan horse that modifies security settings in Internet Explorer. BEBLOH’s capabilities include monitoring browsers & doing checks to evade traditional sandboxes. See Bebloh on #OPSWAT MetaDefender Cloud ↓

1

33

3

1

0

over 6 years ago

OPSWAT vs. #Bebloh A trojan horse that modifies security settings in Internet Explorer. BEBLOH’s capabilities include monitoring browsers & doing checks to evade traditional sandboxes. See how OPSWAT helps to prevent Bebloh ↓

0

4

2

0

over 6 years ago

OPSWAT vs. #Bebloh A trojan horse that modifies security settings in Internet Explorer. BEBLOH’s capabilities include monitoring browsers & doing checks to evade traditional sandboxes. See how OPSWAT helps to prevent Bebloh ↓

0

5

2

0

about 7 years ago

2019/06/17（月）添付ファイル付 #不審メール（ #bebloh , #ursnif (A)）の調査 https://t.co/8kYMK2Tams この日のbebloh/ursnifのバラマキでは、幾つか変更点がありました。

1

16

5

0

TMMalAnalyst @tmmalanalyst

about 7 years ago

■通信先・ステガノ-1 hxxps://images2.imgbox[.]com/fb/a9/wH2ykZbz_o.png ・ステガノ-2 hxxps://i.imgur[.]com/h0P306h.png ■#bebloh C2 hxxps://timenard[.]top ■ダウンロード先 hxxps://timenard[.]top/uploads/presentation.rar ■#ursnif C2 hxxps://tupeska[.]top/images/

1

10

4

0

about 7 years ago

Jun-05,2019(JST). Japanese MalSpam attached XLS -> wmic -> PowerShell -> Download exe -> infects #Bebloh? . Leads XLS file VT : https://t.co/Lf8voYWzbb Download Malware file VT : https://t.co/1LUR6fPv67

tmmalanalyst's tweet photo. Jun-05,2019(JST). Japanese MalSpam attached XLS -> wmic -> PowerShell -> Download exe -> infects #Bebloh? .
Leads XLS file VT : https://t.co/Lf8voYWzbb
Download Malware file VT : https://t.co/1LUR6fPv67 https://t.co/27F1NLBt67

0

20

8

1

0

JAMESWT @JAMESWT_WT

about 7 years ago

berdiset[.]top/uploads/QuotaManager is #Spy #Bebloh @58_158_177_102 @VirITeXplorer @James_inthe_box @malwrhunterteam

moto_sato

@58_158_177_102

about 7 years ago

日本語ばらまきマルウェアメールを観測しています。 Subject： [数字5桁]発注分 5/30送り状Ｎｏ報告 5月請求書の件 FW: 【重要連絡】 FW: 【（株) . 】お支払案内書 Filename：請求書_[数字7桁].xls Hash：cf00bd9418747f34c75aaa6bd37aa6d1 Connect to ... berdiset[.]top/uploads/QuotaManager

1

16

8

0

9

1

0

TMMalAnalyst @tmmalanalyst

about 7 years ago

May-30,2019(JST). Japanese MalSpam attached XLS -> wmic -> PowerShell -> Download exe -> infects #Bebloh? . Leads XLS file VT : https://t.co/DbAPpRxD5x Download Malware file VT : https://t.co/JOtUjnZWGY

tmmalanalyst's tweet photo. May-30,2019(JST). Japanese MalSpam attached XLS -> wmic -> PowerShell -> Download exe -> infects #Bebloh? .
Leads XLS file VT : https://t.co/DbAPpRxD5x
Download Malware file VT : https://t.co/JOtUjnZWGY https://t.co/rX9DYPDrBj

0

14

11

0

Cybereason_JP_SOC @CybereasonJPSOC

about 7 years ago

15時過ぎより、 #不審メールのばらまきを観測しています。 ■件名 5/30送り状Ｎｏ報告 ■添付ファイル請求書_nnnnnnn.xls ※nnnnnnnは数字7桁 https://t.co/hhPs2N2UgX #bebloh へのダウンローダと思われます。

1

13

7

0

about 7 years ago

@CybereasonJPSOC detects the latest #malspam campaign targeting #Japan, spreading #Bebloh / #URLZONE & #Ursnif / #Gozi , which utilizes wmic for execution. Unknown hash. SHA1:6c41d5953cae2f8c613e3da0a5372a75611db44b

CybereasonJPSOC's tweet photo. @CybereasonJPSOC detects the latest #malspam campaign targeting #Japan, spreading #Bebloh / #URLZONE & #Ursnif / #Gozi , which utilizes wmic for execution. Unknown hash.
SHA1:6c41d5953cae2f8c613e3da0a5372a75611db44b https://t.co/JupfsxjIOy

0

11

2

0

TMMalAnalyst @tmmalanalyst

about 7 years ago

May-27,2019(JST). Japanese MalSpam attached XLS -> wmic -> PowerShell -> Download exe -> infects #Bebloh? . Leads XLS file VT : https://t.co/bboZv4BkqC Download Malware file VT : https://t.co/zO00V9mJSX

tmmalanalyst's tweet photo. May-27,2019(JST). Japanese MalSpam attached XLS -> wmic -> PowerShell -> Download exe -> infects #Bebloh? .
Leads XLS file VT : https://t.co/bboZv4BkqC
Download Malware file VT : https://t.co/zO00V9mJSX https://t.co/wWw36SaG4f

0

23

9

0

about 7 years ago

■件名 FW: 【再送】2019/2 仮版下送付】【電話未確認】 (※)2019ご請求の件 (※)指定請求書 (※)注文書、請書及び請求書のご送付 (※)はなし、-、Fw:、Fwd:、Re:、RE:のどれかの可能性あり HelpPaneSは #bebloh です。そこから以下をDLします。 hxxps://paterdonga[.]com/uploads/sales.rar

1

5

1

0

about 7 years ago

■通信先ステガノ hxxps://i.imgur[.]com/47xDq9v.png hxxps://images2.imgbox[.]com/1b/a6/9pJo30dK_o.png #bebloh C2 hxxps://donersonma[.]com #ursnif C2 hxxps://lidersonef[.]com/images/ bebloh DLL https://t.co/f93KHZOQz4

1

10

6

1

0

Cybereason_JP_SOC @CybereasonJPSOC

over 7 years ago

■bebloh DLL https://t.co/FN2pTeWkrp ■通信先 #bebloh C2 hxxps://pidobrake[.]com

1

3

2

0

over 7 years ago

@CybereasonJPSOC detects the latest #malspam campaign targeting #Japan, spreading #Bebloh / #URLZONE & #Ursnif / #Gozi , which utilizes #steganography. Unknown hash. SHA1:7316be0c8696272cd26e33a2360d491ade454935 @cybereasonjp

2

7

4

0

over 7 years ago

2019/04/11(水) 添付ファイル付 #不審メール（ #bebloh ）の調査 https://t.co/e6LIubiL2b 調査の中ではこれまでの追加マルウェアである #ursnif のダウンロードは観測していません。

1

14

6

0