Vulnerabilitymedium
[SI-LAB] EMOTET spread in Chile impacted hundreds of users and targeted financial and banking services
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-20250 | Absolute Path Traversal in RARLAB WinRAR ACE Extraction (UNACEV2.dll) | 7.8 | 96% | KEVRansomwarePoC ×5 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | triosalud.cl | this file in two different directories, namely: http://www.triosalud[.]cl/wp/wp-content/uploads/2019/02/denuncias.rar http://www.tr |
| md5 | 1e541b14b531bcac70e77a012b0f0f7f | al Analysis Threat name: __Denuncia_Activa_CL.PDF.bat MD5 : 1e541b14b531bcac70e77a012b0f0f7f SHA1 : 0ca0cd36fb4c9dfeb3e325a01cfb7b75413d1f81 First submi |
| md5 | 98172becba685afdd109ac909e3a1085 | e . EMOTET / Integrity.exe Threat name: Integrity.exe MD5 : 98172becba685afdd109ac909e3a1085 SHA1 : cbb0377ec81d8b120382950953d9069424fb100e First submi |
| sha1 | 0ca0cd36fb4c9dfeb3e325a01cfb7b75413d1f81 | va_CL.PDF.bat MD5 : 1e541b14b531bcac70e77a012b0f0f7f SHA1 : 0ca0cd36fb4c9dfeb3e325a01cfb7b75413d1f81 First submission: 2019-03-22 00:39:43 The last weeks of Mar |
| sha1 | cbb0377ec81d8b120382950953d9069424fb100e | Integrity.exe MD5 : 98172becba685afdd109ac909e3a1085 SHA1 : cbb0377ec81d8b120382950953d9069424fb100e First submission: 2019-03-18 15:10:08 Deeping into the last |
From the original article
12 min read at securityaffairs.com
EMOTET spread in Chile targeted financial and banking services. SI-LAB detected hundreds of users that were impacted by this malware between March 18th and 26th of 2019. The last days of March 2019 are making headlines due to a targeted cyber attack involving a new variant of infamous EMOTET malware.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.