DarkCasino Strikes: Unveiling the Cyber Shadows of Water Hydra
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Direct Malicious File - T1204.002 Malicious Link - T1204.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Software - T1592.002 Visual Basic - T1059.005 Vulnerabilities - T1588.006 Rundll32 - T1085
Show in Graph
Common Information
Type Value
UUID 0024abc8-622b-45d4-bb54-9a9c32e80740
Fingerprint 80280fc5cda7d2e9
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 12, 2024, midnight
Added to db Aug. 31, 2024, 1:22 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline DarkCasino Strikes: Unveiling the Cyber Shadows of Water Hydra
Title DarkCasino Strikes: Unveiling the Cyber Shadows of Water Hydra
Detected Hints/Tags/Attributes 45/2/11
Source URLs
Redirection Url
Details Source https://intel471.com/blog/darkcasino-strikes-unveiling-the-cyber-shadows-of-water-hydra
URL Provider
Details Provider Source level domain
Details intel471.com intel471.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 138 ✔ Intel471 https://intel471.com/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 133 
cve-2023-38831
Details CVE 24 
cve-2024-21412
Details CVE 3 
cve-2023-22397
Details CVE 45 
cve-2023-36025
Details CVE 176 
cve-2023-23397
Details File 1018 
rundll32.exe
Details File 1 
safe.dll
Details File 2125 
cmd.exe
Details File 155 
cscript.exe
Details File 376 
wscript.exe
Details IPv4 3 
10.10.1.1