PowerPoint Presentation
Image Description
Common Information
Type Value
UUID c4806ca8-795f-4e77-b2d3-d3a67edba781
Fingerprint 43e5e389197ff7abbd0b112e47cf999799bc5cf8b1b030781b5d6ca3dcb2de7c
Analysis status DONE
Considered CTI value 2
Text language
Published June 12, 2023, 11:32 a.m.
Added to db Feb. 7, 2024, 7:19 p.m.
Last updated Aug. 31, 2024, 2:34 a.m.
Headline PowerPoint Presentation
Title PowerPoint Presentation
Detected Hints/Tags/Attributes 63/2/97
Attributes
Details Type #Events CTI Value
Details CVE 243
cve-2023-34362
Details Domain 285
microsoft.net
Details Domain 397
asp.net
Details Domain 1
dojustit.mooo.com
Details Domain 251
www.bleepingcomputer.com
Details Domain 1373
twitter.com
Details Domain 63
www.rapid7.com
Details Domain 469
www.cisa.gov
Details Domain 38
community.progress.com
Details Domain 435
www.hivepro.com
Details IBM X-Force - Unattributed Threat Actor 6
Hive0065
Details IPv4 1
188.241.58.0
Details IPv4 5
5.252.189.0
Details IPv4 6
5.252.190.0
Details IPv4 14
5.252.191.0
Details IPv4 4
5.252.23.116
Details IPv4 4
5.252.25.88
Details IPv4 7
84.234.96.104
Details IPv4 15
89.39.105.108
Details IPv4 13
138.197.152.201
Details IPv4 15
148.113.152.144
Details IPv4 4
198.12.76.214
Details IPv4 15
209.97.137.33
Details IPv4 7
209.222.103.170
Details IPv4 3
104.194.222.107
Details IPv4 4
146.0.77.141
Details IPv4 4
146.0.77.155
Details IPv4 4
146.0.77.183
Details IPv4 4
162.244.34.26
Details IPv4 4
162.244.35.6
Details IPv4 4
179.60.150.143
Details IPv4 4
185.104.194.156
Details IPv4 4
185.104.194.24
Details IPv4 4
185.104.194.40
Details IPv4 4
185.117.88.17
Details IPv4 4
185.162.128.75
Details IPv4 4
185.174.100.215
Details IPv4 4
185.174.100.250
Details IPv4 4
185.181.229.240
Details IPv4 4
185.181.229.73
Details IPv4 4
185.183.32.122
Details IPv4 4
185.185.50.172
Details IPv4 4
188.241.58.244
Details IPv4 4
193.169.245.79
Details IPv4 4
194.33.40.103
Details IPv4 4
194.33.40.104
Details IPv4 1
194.33.40.164
Details IPv4 7
198.27.75.110
Details IPv4 4
206.221.182.106
Details IPv4 4
209.127.116.122
Details IPv4 4
209.127.4.22
Details IPv4 4
45.227.253.133
Details IPv4 4
45.227.253.147
Details IPv4 4
45.227.253.50
Details IPv4 4
45.227.253.6
Details IPv4 4
45.227.253.82
Details IPv4 4
45.56.165.248
Details IPv4 4
5.149.248.68
Details IPv4 4
5.149.250.74
Details IPv4 4
5.149.250.92
Details IPv4 4
5.188.86.114
Details IPv4 4
5.188.86.250
Details IPv4 4
5.188.87.194
Details IPv4 4
5.188.87.226
Details IPv4 4
5.188.87.27
Details IPv4 4
5.34.180.205
Details IPv4 4
62.112.11.57
Details IPv4 4
62.182.82.19
Details IPv4 4
62.182.85.234
Details IPv4 4
66.85.26.215
Details IPv4 4
66.85.26.234
Details IPv4 4
66.85.26.248
Details IPv4 4
79.141.160.78
Details IPv4 4
79.141.160.83
Details IPv4 4
84.234.96.31
Details IPv4 4
89.39.104.118
Details IPv4 4
91.202.4.76
Details IPv4 4
91.222.174.95
Details IPv4 4
91.229.76.187
Details IPv4 4
93.190.142.131
Details Mandiant Temporary Group Assumption 3
TEMP.WARLOCK
Details MITRE ATT&CK Techniques 245
T1203
Details MITRE ATT&CK Techniques 208
T1068
Details MITRE ATT&CK Techniques 145
T1588
Details MITRE ATT&CK Techniques 110
T1588.006
Details MITRE ATT&CK Techniques 60
T1588.005
Details MITRE ATT&CK Techniques 444
T1071
Details Deprecated Microsoft Threat Actor Naming Taxonomy (Groups in development) 39
DEV-0950
Details Threat Actor Identifier by Red Alert 22
SectorJ04
Details Threat Actor Identifier by Thales 2
ATK 103
Details Threat Actor Identifier - FIN 127
FIN11
Details Url 1
https://www.bleepingcomputer.com/news/security/new-moveit-transfer-zero-day-
Details Url 1
https://twitter.com/msftsecintel/status/1665537734746816512
Details Url 3
https://twitter.com/msftsecintel/status/1665537730946670595
Details Url 1
https://www.rapid7.com/blog/post/2023/06/01/rapid7-observed-exploitation-of-
Details Url 4
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-158a
Details Url 1
https://community.progress.com/s/article/moveit-transfer-critical-vulnerability-