Common Information
| Type | Value |
|---|---|
| Value |
mshta.exe |
| Category | |
| Type | File |
| Misp Type | |
| Description |
| Details | Published | Attributes | CTI | Title | ||
|---|---|---|---|---|---|---|
| Details | Website | 2024-10-16 | 1 | Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack - RedPacket Security | ||
| Details | Website | 2024-10-16 | 1 | Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware | National Cyber Security Consulting | ||
| Details | Website | 2024-10-16 | 2 | “Water Makara”使用Astaroth恶意软件对巴西组织进行有针对性的攻击-安全客 - 安全资讯平台 | ||
| Details | Website | 2024-10-15 | 4 | Researchers Uncover Hijack Loader Malware Using Stolen Code-Signing Certificates | ||
| Details | Website | 2024-10-15 | 275 | SideWinder APT’s post-exploitation framework analysis | ||
| Details | Website | 2024-10-15 | 4 | Researchers Uncover Hijack Loader Malware Using Stolen Code-Signing Certificates - RedPacket Security | ||
| Details | Website | 2024-10-15 | 4 | Researchers Uncover Hijack Loader Malware Using Stolen Code-Signing Certificates | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware | National Cyber Security Consulting | ||
| Details | Website | 2024-10-15 | 80 | Water Makara Campaign IOCs - SEC-1275-1 | ||
| Details | Website | 2024-10-14 | 19 | Water Makara Uses Obfuscated JavaScript in Spear Phishing Campaign Targets Brazil With Astaroth Malware | ||
| Details | Website | 2024-10-11 | 93 | HijackLoader evolution: abusing genuine signing certificates | ||
| Details | Website | 2024-10-11 | 45 | 每周高级威胁情报解读(2024.10.11~10.17) | ||
| Details | Website | 2024-10-08 | 28 | 북한 김수키(Kimsuky)에서 만든 악성코드-20241003_20134.docx.lnk(2024.10.3) | ||
| Details | 2024-09-30 | 78 | Global Threat Report | |||
| Details | Website | 2024-09-30 | 6 | LetsDefend SA Event ID: 114, SOC164 — Suspicious Mshta Behavior | ||
| Details | Website | 2024-09-26 | 15 | 김수키(Kimsuky) 보조금신청 관련문의건 으로 위장 하는 악성코드(2024.9.23) | ||
| Details | Website | 2024-09-23 | 4 | Emmenhtal Loader IOCs - SEC-1275-1 | ||
| Details | Website | 2024-09-20 | 11 | Exploring LOLBAS Cyberattacks: Turning Legitimate Tools into Cyber Weapons | ||
| Details | Website | 2024-09-20 | 36 | 김수키(Kimsuky)암호화폐 거래소 업비트 사칭 악성코드-Upbit_20240916 docx lnk(2024.9.17) | ||
| Details | Website | 2024-09-19 | 16 | Webdav Malicious File Hosting Powering Stealthy Malware Attacks | ||
| Details | Website | 2024-09-19 | 114 | WebDAV-as-a-Service: Uncovering the infrastructure behind Emmenhtal loader distribution | ||
| Details | Website | 2024-09-19 | 175 | Gamaredon APT IOCs - VI - SEC-1275-1 | ||
| Details | Website | 2024-09-17 | 12 | PeakLight Campaign — MSHTA | ||
| Details | Website | 2024-09-16 | 3 | Gamaredon APT IOCs - V - SEC-1275-1 | ||
| Details | Website | 2024-09-15 | 10 | Best practices for event logging and threat detection | ||
| Details | Website | 2024-09-12 | 71 | Crystal Rans0m: Emerging hybrid ransomware with stealer capabilities |