찾아줄게요

CPD 파일은 무엇입니까?

• 안녕하세요. 제 컴퓨터에서 CPD라는 파일을 찾았는데 이것이 무엇인지 잘 모르겠습니다. 알려주시면 감사하겠습니다.

• CPD 파일은 Complaints Desk 입니다. Complaints에서 배포한 파일인 것으로 보입니다. 2015-12-05 00:46:55에 처음으로 보고되었으며 2015-12-05 00:46:55에 마지막으로 보고되었습니다.

• 적절한 프로그램을 다운로드하여 CPD 파일을 열 수 있습니다.

• Complaints Desk

• 시그니처 정보가 없습니다.

• 연관 링크 #1: 첨부된 링크가 없습니다.

• 연관 링크 #2: 첨부된 링크가 없습니다.

• [2021-07-01 17:08:35] @pollo290987 #dropper #redline #fickerstealer #cryptbot Data.exe ce7931866cf54b812ea1b2f40720eb41 redline: /qitoshalan.xyz:80 redline: /185.215.113.17:18597 fickerstealer: /game2030.site:80 cryptbot: /lopcpd05.top/download.php?file= lv.exe

• [2021-04-12 16:39:19] @dubstard @zerosslHQ @Uniswap @TecnocraticaCPD @ovh_support_fr @OVHcloud_US @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 Hi. The serial number is 1a:d2:4e:9f:53:a4:2a:4c:60:82:59:3a:fd:1a:12:ec https://crt.sh/?id= 4353204644 The real website being impersonated is http://app.uniswap.org Thanks!

• [2021-04-10 13:49:45] @dubstard ???? @Uniswap ⚠ /app.uniswap.info-liquidity­.com ☣ AS16276 5.196.132.163 ???????? ????@TecnocraticaCPD ???? @ovh_support_fr @OVHcloud_US ????@zerosslHQ @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404

• [2021-04-01 15:27:09] @dms1899 @Myrtus0x0 hxxps://afoninblog.com/wp-content/plugins/jet-tabs/templates/admin-templates/z8GH86Z4Yz.php 40111 https://tria.ge/210401-3p7hla9xca hxxps://mulhollandpoolandspa.com/wp-content/plugins/LayerSlider/static/codemirror/lrR1L6WhH.php 40112 https://tria.ge/210401-cpdlvhja96

• [2020-12-17 08:01:50] @p5yb34m #IcedID #TA551: .doc Sample: https://bazaar.abuse.ch/sample/7561a0f5134bf3dbaa34d09f2a20dc01057626e74d7df42072bef06d6bd6ee95/ .dll Installer: ://hikangaroo5.com/images/xjs7s/gb40f_eygecpdogfzeca1xtg/ruryf1?sxps= vddxqzhm_&oof= xptbdzfnuzvdtbdq_&cvnp= hyrklms&vfqlp= bthwwipweakc C2 Traffic: s://newfleet.best/avatar/42e1ac41f9b99742fc3bcc0cb40d2f86.jpg

• [2020-08-17 19:04:48] @3XS0 Today's #phish #bec Like holy shit. if you're going to make half an effort to phish my Org. at least make the OWA page look good.. https://app.any.run/tasks/fcf5656c-e4ad-408f-9e72-b1a6ecc7f8bd … 295588802d60578354b408ce7000d174 pic.twitter.com/x9HZScPDJS

• [2020-08-13 22:42:59] @ScarletSharkSec #Emotet sample: https://app.any.run/tasks/917437fd-90d0-461b-a741-9f19d8ec6758 … URLs: hxxp://smleads.eu/images/MxC7g2M0vR/ hxxp://201.171.150.41:443/oleG6Mpk/cA6ULedUdXH/U9OltQdo/ hxxp://94.76.247.61:8080/WUsNsNWh/sCodqkGrXWXc0LZ1p/7WBCpdZYvqIaOX/ @Cryptolaemus1

• [2020-07-11 16:16:40] @malwaretracekr h**p://qrukcqtfrv.duckdns.org @duckdns (128.1.248.228) @zenlayer #AS21859 Download app : tBfSdNaCrGnGcPdKzOxF.apk (Chrome) - Random Filename iOS : None (js loc href is Disable) https://www.virustotal.com/gui/file/5cb02398484ddbad28d572fb09fedc67dbd6d1bd324586d4269da2f3f6eb8c87/detection … @kisa118 @ZeroCERT @SEO20293818 @spam404 @58_158_177_102 @papa_anniekey pic.twitter.com/Rn9gkLTPVo

• [2020-06-10 13:23:53] @bad_packets Mass scanning activity detected from 115.236.79.82 () checking for various SCADA/PLC endpoints. including: • iFix ( https://ge.com/digital/applications/hmi-scada/ifix …) • FX3U-ENET-ADP ( https://allied-automation.com/wp-content/uploads/2015/02/MITSUBISHI_FX3U-ENET-ADP-Ethernet-Users-Manual.pdf …) • KingView ( https://icpdas-usa.com/documents/KingViewUserManual.pdf …) #threatintel

• 보이스피싱, 불법촬영물, 랜섬웨어, 사이버 안보위협 등에 관련된 사안의 경우 다음과 같은 기관 및 단체의 도움을 받을 수 있습니다. 노모어랜섬(No More Ransom) 경찰청 사이버범죄 신고시스템 국가정보원 민원센터