[Z2A]Bimonthly malware challege – Emotet (Back From the Dead)
Tags
| country: | Laos |
| attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 Python - T1059.006 |
Common Information
| Type | Value |
|---|---|
| UUID | 0c1fb593-b86b-4520-a66a-c6b080f5a86c |
| Fingerprint | 8e9138116a4d73a8 |
| Analysis status | DONE |
| Considered CTI value | 1 |
| Text language | |
| Published | Dec. 19, 2022, 3:08 p.m. |
| Added to db | March 4, 2023, 6:56 p.m. |
| Last updated | Nov. 17, 2024, 5:58 p.m. |
| Headline | 0day in {REA_TEAM} |
| Title | [Z2A]Bimonthly malware challege – Emotet (Back From the Dead) |
| Detected Hints/Tags/Attributes | 27/2/34 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 146 | ✔ | 0day in {REA_TEAM} | https://kienmanowar.wordpress.com/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | File | 748 | kernel32.dll |
|
| Details | File | 13 | 'kernel32.dll |
|
| Details | File | 8 | 'user32.dll |
|
| Details | File | 10 | 'ntdll.dll |
|
| Details | File | 1 | 'shlwapi.dll |
|
| Details | File | 2 | 'iphlpapi.dll |
|
| Details | File | 1 | 'urlmon.dll |
|
| Details | File | 2 | 'ws2_32.dll |
|
| Details | File | 2 | 'crypt32.dll |
|
| Details | File | 3 | 'shell32.dll |
|
| Details | File | 5 | 'advapi32.dll |
|
| Details | File | 1 | 'gdiplus.dll |
|
| Details | File | 2 | 'gdi32.dll |
|
| Details | File | 1 | 'ole32.dll |
|
| Details | File | 2 | 'psapi.dll |
|
| Details | File | 1 | 'cabinet.dll |
|
| Details | File | 1 | 'imagehlp.dll |
|
| Details | File | 1 | 'netapi32.dll |
|
| Details | File | 3 | 'wtsapi32.dll |
|
| Details | File | 1 | 'mpr.dll |
|
| Details | File | 3 | 'wininet.dll |
|
| Details | File | 1 | 'userenv.dll |
|
| Details | File | 1 | 'bcrypt.dll |
|
| Details | File | 1 | 'comctl32.dll |
|
| Details | File | 2 | 'comdlg32.dll |
|
| Details | File | 5 | 'msvcrt.dll |
|
| Details | File | 1 | 'oleaut32.dll |
|
| Details | File | 1 | 'srsvc.dll |
|
| Details | File | 1 | 'winhttp.dll |
|
| Details | File | 1 | 'advpack.dll |
|
| Details | File | 1 | 'combase.dll |
|
| Details | File | 1 | 'ntoskrnl.exe |
|
| Details | md5 | 1 | 577118e39051f0678a52f871f74cd675 |
|
| Details | sha256 | 1 | fc345d151b44639631fc6b88a979462dfba3aa5c281ee3a526c550359268c694 |