APT40 Advisory - PRC MSS tradecraft in action
Common Information
| Type | Value |
|---|---|
| UUID | 4730570b-9d7a-4810-97ac-f806bf754be3 |
| Fingerprint | 269bc606e96a21c2656367c5c23a6510adab95e66cf24377251a4e02d8f4fb54 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | July 9, 2024, 11:15 a.m. |
| Added to db | Aug. 4, 2024, 6:32 p.m. |
| Last updated | Aug. 31, 2024, 9:20 a.m. |
| Headline | APT40 Advisory - PRC MSS tradecraft in action |
| Title | APT40 Advisory - PRC MSS tradecraft in action |
| Detected Hints/Tags/Attributes | 489/4/207 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 143 | cve-2021-31207 |
|
| Details | CVE | 142 | cve-2021-34523 |
|
| Details | CVE | 168 | cve-2021-34473 |
|
| Details | Domain | 101 | www.elastic.co |
|
| Details | Domain | 2 | tlp.green |
|
| Details | Domain | 2 | classification.au |
|
| Details | Domain | 219 | gist.github.com |
|
| Details | Domain | 152 | cisa.gov |
|
| Details | Domain | 2 | www.creativecommons.org |
|
| Details | Domain | 2 | www.pmc.gov.au |
|
| Details | Domain | 16 | cyber.gov.au |
|
| Details | File | 3 | horizon.jsp |
|
| Details | File | 3 | index_jsp.java |
|
| Details | File | 3 | nova_jsp.java |
|
| Details | File | 2 | log4jhotpatch.jar |
|
| Details | File | 2 | process-execution-from-an-unusual-directory.html |
|
| Details | File | 17 | attack.exe |
|
| Details | File | 2 | 'dismhost.exe |
|
| Details | File | 20 | esif_uf.exe |
|
| Details | File | 74 | vmtoolsd.exe |
|
| Details | File | 2 | cwainstaller.exe |
|
| Details | File | 2 | trolleyexpress.exe |
|
| Details | File | 351 | recycle.bin |
|
| Details | md5 | 3 | 26a5a7e71a601be991073c78d513dee3 |
|
| Details | md5 | 3 | 87c88f06a7464db2534bc78ec2b915de |
|
| Details | md5 | 3 | 6a9bc68c9bc5cefaf1880ae6ffb1d0ca |
|
| Details | md5 | 3 | 64454645a9a21510226ab29e01e76d39 |
|
| Details | md5 | 3 | e2175f91ce3da2e8d46b0639e941e13f |
|
| Details | md5 | 3 | 9f89f069466b8b5c9bf25c9374a4daf8 |
|
| Details | md5 | 3 | 187d6f2ed2c80f805461d9119a5878ac |
|
| Details | md5 | 3 | ed7178cec90ed21644e669378b3a97ec |
|
| Details | md5 | 3 | 5bf7560d0a638e34035f85cd3788e258 |
|
| Details | md5 | 3 | e02be0dc614523ddd7a28c9e9d500cff |
|
| Details | md5 | 2 | 5f9de750470c9e0e1f9c9c33f0ec3e56 |
|
| Details | MITRE ATT&CK Techniques | 104 | T1505.003 |
|
| Details | MITRE ATT&CK Techniques | 14 | T1594 |
|
| Details | MITRE ATT&CK Techniques | 3 | T1584.008 |
|
| Details | MITRE ATT&CK Techniques | 10 | T1001.003 |
|
| Details | MITRE ATT&CK Techniques | 139 | T1021.002 |
|
| Details | MITRE ATT&CK Techniques | 542 | T1190 |
|
| Details | MITRE ATT&CK Techniques | 71 | T1078.002 |
|
| Details | MITRE ATT&CK Techniques | 243 | T1018 |
|
| Details | MITRE ATT&CK Techniques | 67 | T1039 |
|
| Details | MITRE ATT&CK Techniques | 36 | T1558.003 |
|
| Details | MITRE ATT&CK Techniques | 1006 | T1082 |
|
| Details | MITRE ATT&CK Techniques | 176 | T1135 |
|
| Details | MITRE ATT&CK Techniques | 152 | T1090 |
|
| Details | MITRE ATT&CK Techniques | 149 | T1102 |
|
| Details | MITRE ATT&CK Techniques | 695 | T1059 |
|
| Details | MITRE ATT&CK Techniques | 50 | T1072 |
|
| Details | MITRE ATT&CK Techniques | 89 | T1552.001 |
|
| Details | MITRE ATT&CK Techniques | 56 | T1213 |
|
| Details | MITRE ATT&CK Techniques | 422 | T1041 |
|
| Details | MITRE ATT&CK Techniques | 160 | T1021.001 |
|
| Details | MITRE ATT&CK Techniques | 9 | T1505.001 |
|
| Details | MITRE ATT&CK Techniques | 289 | T1003 |
|
| Details | MITRE ATT&CK Techniques | 25 | T1111 |
|
| Details | MITRE ATT&CK Techniques | 40 | T1528 |
|
| Details | MITRE ATT&CK Techniques | 8 | T1563.002 |
|
| Details | MITRE ATT&CK Techniques | 306 | T1078 |
|
| Details | MITRE ATT&CK Techniques | 247 | T1070 |
|
| Details | MITRE ATT&CK Techniques | 122 | T1543 |
|
| Details | MITRE ATT&CK Techniques | 95 | T1572 |
|
| Details | MITRE ATT&CK Techniques | 86 | T1059.004 |
|
| Details | MITRE ATT&CK Techniques | 208 | T1068 |
|
| Details | MITRE ATT&CK Techniques | 10 | T1056.003 |
|
| Details | MITRE ATT&CK Techniques | 42 | T1040 |
|
| Details | MITRE ATT&CK Techniques | 99 | T1539 |
|
| Details | MITRE ATT&CK Techniques | 168 | T1046 |
|
| Details | MITRE ATT&CK Techniques | 442 | T1071.001 |
|
| Details | MITRE ATT&CK Techniques | 16 | T1589.001 |
|
| Details | MITRE ATT&CK Techniques | 56 | T1595.002 |
|
| Details | MITRE ATT&CK Techniques | 50 | T1592 |
|
| Details | MITRE ATT&CK Techniques | 7 | T1593.002 |
|
| Details | MITRE ATT&CK Techniques | 4 | T1590.001 |
|
| Details | MITRE ATT&CK Techniques | 22 | T1589.002 |
|
| Details | MITRE ATT&CK Techniques | 82 | T1583.001 |
|
| Details | MITRE ATT&CK Techniques | 66 | T1583 |
|
| Details | MITRE ATT&CK Techniques | 6 | T1583.002 |
|
| Details | MITRE ATT&CK Techniques | 36 | T1586 |
|
| Details | MITRE ATT&CK Techniques | 16 | T1587.002 |
|
| Details | MITRE ATT&CK Techniques | 66 | T1584 |
|
| Details | MITRE ATT&CK Techniques | 26 | T1587.003 |
|
| Details | MITRE ATT&CK Techniques | 96 | T1587.001 |
|
| Details | MITRE ATT&CK Techniques | 33 | T1588.003 |
|
| Details | MITRE ATT&CK Techniques | 8 | T1585.003 |
|
| Details | MITRE ATT&CK Techniques | 18 | T1588.004 |
|
| Details | MITRE ATT&CK Techniques | 409 | T1566 |
|
| Details | MITRE ATT&CK Techniques | 41 | T1078.001 |
|
| Details | MITRE ATT&CK Techniques | 310 | T1566.001 |
|
| Details | MITRE ATT&CK Techniques | 183 | T1566.002 |
|
| Details | MITRE ATT&CK Techniques | 191 | T1133 |
|
| Details | MITRE ATT&CK Techniques | 183 | T1189 |
|
| Details | MITRE ATT&CK Techniques | 310 | T1047 |
|
| Details | MITRE ATT&CK Techniques | 59 | T1059.006 |
|
| Details | MITRE ATT&CK Techniques | 12 | T1053.002 |
|
| Details | MITRE ATT&CK Techniques | 93 | T1059.007 |
|
| Details | MITRE ATT&CK Techniques | 275 | T1053.005 |
|
| Details | MITRE ATT&CK Techniques | 239 | T1106 |
|
| Details | MITRE ATT&CK Techniques | 25 | T1559 |
|
| Details | MITRE ATT&CK Techniques | 333 | T1059.003 |
|
| Details | MITRE ATT&CK Techniques | 174 | T1569.002 |
|
| Details | MITRE ATT&CK Techniques | 460 | T1059.001 |
|
| Details | MITRE ATT&CK Techniques | 245 | T1203 |
|
| Details | MITRE ATT&CK Techniques | 137 | T1059.005 |
|
| Details | MITRE ATT&CK Techniques | 365 | T1204.002 |
|
| Details | MITRE ATT&CK Techniques | 12 | T1059.002 |
|
| Details | MITRE ATT&CK Techniques | 44 | T1053.003 |
|
| Details | MITRE ATT&CK Techniques | 10 | T1137.001 |
|
| Details | MITRE ATT&CK Techniques | 180 | T1543.003 |
|
| Details | MITRE ATT&CK Techniques | 380 | T1547.001 |
|
| Details | MITRE ATT&CK Techniques | 30 | T1547.009 |
|
| Details | MITRE ATT&CK Techniques | 70 | T1574.001 |
|
| Details | MITRE ATT&CK Techniques | 227 | T1574.002 |
|
| Details | MITRE ATT&CK Techniques | 112 | T1098 |
|
| Details | MITRE ATT&CK Techniques | 34 | T1078.004 |
|
| Details | MITRE ATT&CK Techniques | 20 | T1055.003 |
|
| Details | MITRE ATT&CK Techniques | 86 | T1055.012 |
|
| Details | MITRE ATT&CK Techniques | 44 | T1134.001 |
|
| Details | MITRE ATT&CK Techniques | 11 | T1546.004 |
|
| Details | MITRE ATT&CK Techniques | 59 | T1055.001 |
|
| Details | MITRE ATT&CK Techniques | 43 | T1078.003 |
|
| Details | MITRE ATT&CK Techniques | 41 | T1014 |
|
| Details | MITRE ATT&CK Techniques | 60 | T1202 |
|
| Details | MITRE ATT&CK Techniques | 627 | T1027 |
|
| Details | MITRE ATT&CK Techniques | 59 | T1218.005 |
|
| Details | MITRE ATT&CK Techniques | 160 | T1027.002 |
|
| Details | MITRE ATT&CK Techniques | 44 | T1218.010 |
|
| Details | MITRE ATT&CK Techniques | 26 | T1027.003 |
|
| Details | MITRE ATT&CK Techniques | 55 | T1553.002 |
|
| Details | MITRE ATT&CK Techniques | 19 | T1027.004 |
|
| Details | MITRE ATT&CK Techniques | 35 | T1222.002 |
|
| Details | MITRE ATT&CK Techniques | 183 | T1036.005 |
|
| Details | MITRE ATT&CK Techniques | 97 | T1497.001 |
|
| Details | MITRE ATT&CK Techniques | 348 | T1036 |
|
| Details | MITRE ATT&CK Techniques | 91 | T1620 |
|
| Details | MITRE ATT&CK Techniques | 70 | T1562.004 |
|
| Details | MITRE ATT&CK Techniques | 94 | T1564.001 |
|
| Details | MITRE ATT&CK Techniques | 297 | T1070.004 |
|
| Details | MITRE ATT&CK Techniques | 66 | T1564.003 |
|
| Details | MITRE ATT&CK Techniques | 93 | T1070.006 |
|
| Details | MITRE ATT&CK Techniques | 92 | T1070.001 |
|
| Details | MITRE ATT&CK Techniques | 550 | T1112 |
|
| Details | MITRE ATT&CK Techniques | 504 | T1140 |
|
| Details | MITRE ATT&CK Techniques | 57 | T1036.004 |
|
| Details | MITRE ATT&CK Techniques | 235 | T1562 |
|
| Details | MITRE ATT&CK Techniques | 173 | T1003.001 |
|
| Details | MITRE ATT&CK Techniques | 67 | T1003.003 |
|
| Details | MITRE ATT&CK Techniques | 44 | T1110.001 |
|
| Details | MITRE ATT&CK Techniques | 7 | T1187 |
|
| Details | MITRE ATT&CK Techniques | 8 | T1555.001 |
|
| Details | MITRE ATT&CK Techniques | 118 | T1056.001 |
|
| Details | MITRE ATT&CK Techniques | 44 | T1212 |
|
| Details | MITRE ATT&CK Techniques | 9 | T1110.002 |
|
| Details | MITRE ATT&CK Techniques | 27 | T1003.006 |
|
| Details | MITRE ATT&CK Techniques | 172 | T1555 |
|
| Details | MITRE ATT&CK Techniques | 125 | T1555.003 |
|
| Details | MITRE ATT&CK Techniques | 100 | T1007 |
|
| Details | MITRE ATT&CK Techniques | 75 | T1010 |
|
| Details | MITRE ATT&CK Techniques | 72 | T1087.001 |
|
| Details | MITRE ATT&CK Techniques | 501 | T1012 |
|
| Details | MITRE ATT&CK Techniques | 585 | T1083 |
|
| Details | MITRE ATT&CK Techniques | 86 | T1124 |
|
| Details | MITRE ATT&CK Techniques | 230 | T1033 |
|
| Details | MITRE ATT&CK Techniques | 124 | T1482 |
|
| Details | MITRE ATT&CK Techniques | 22 | T1087.003 |
|
| Details | MITRE ATT&CK Techniques | 99 | T1087.002 |
|
| Details | MITRE ATT&CK Techniques | 119 | T1049 |
|
| Details | MITRE ATT&CK Techniques | 433 | T1057 |
|
| Details | MITRE ATT&CK Techniques | 185 | T1518 |
|
| Details | MITRE ATT&CK Techniques | 74 | T1069.002 |
|
| Details | MITRE ATT&CK Techniques | 42 | T1016.001 |
|
| Details | MITRE ATT&CK Techniques | 159 | T1021 |
|
| Details | MITRE ATT&CK Techniques | 12 | T1550.003 |
|
| Details | MITRE ATT&CK Techniques | 30 | T1021.006 |
|
| Details | MITRE ATT&CK Techniques | 118 | T1570 |
|
| Details | MITRE ATT&CK Techniques | 534 | T1005 |
|
| Details | MITRE ATT&CK Techniques | 29 | T1560.002 |
|
| Details | MITRE ATT&CK Techniques | 21 | T1114.002 |
|
| Details | MITRE ATT&CK Techniques | 82 | T1115 |
|
| Details | MITRE ATT&CK Techniques | 111 | T1119 |
|
| Details | MITRE ATT&CK Techniques | 20 | T1074.002 |
|
| Details | MITRE ATT&CK Techniques | 49 | T1074.001 |
|
| Details | MITRE ATT&CK Techniques | 157 | T1560 |
|
| Details | MITRE ATT&CK Techniques | 89 | T1114 |
|
| Details | MITRE ATT&CK Techniques | 19 | T1048.002 |
|
| Details | MITRE ATT&CK Techniques | 92 | T1048 |
|
| Details | MITRE ATT&CK Techniques | 100 | T1567.002 |
|
| Details | MITRE ATT&CK Techniques | 18 | T1102.001 |
|
| Details | MITRE ATT&CK Techniques | 60 | T1043 |
|
| Details | MITRE ATT&CK Techniques | 4 | T1102.003 |
|
| Details | MITRE ATT&CK Techniques | 492 | T1105 |
|
| Details | MITRE ATT&CK Techniques | 31 | T1071.002 |
|
| Details | MITRE ATT&CK Techniques | 35 | T1090.001 |
|
| Details | MITRE ATT&CK Techniques | 36 | T1090.002 |
|
| Details | MITRE ATT&CK Techniques | 115 | T1571 |
|
| Details | MITRE ATT&CK Techniques | 48 | T1090.003 |
|
| Details | MITRE ATT&CK Techniques | 33 | T1102.002 |
|
| Details | MITRE ATT&CK Techniques | 163 | T1573 |
|
| Details | MITRE ATT&CK Techniques | 74 | T1573.002 |
|
| Details | MITRE ATT&CK Techniques | 197 | T1489 |
|
| Details | MITRE ATT&CK Techniques | 14 | T1561 |
|
| Details | MITRE ATT&CK Techniques | 48 | T1529 |
|
| Details | MITRE ATT&CK Techniques | 107 | T1496 |
|
| Details | Threat Actor Identifier - APT | 143 | APT40 |
|
| Details | Url | 2 | https://www.elastic.co/guide/en/security/current |
|
| Details | Url | 7 | https://gist.github.com |