Threat Source newsletter (May 26, 2022) — BlackByte adds itself to the grocery list of big game hunters
Tags
country: Armenia Egypt Canada Costa Rica Greece Indonesia Spain Madagascar Serbia Ukraine
attack-pattern: Data Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Software - T1592.002 Vulnerabilities - T1588.006 Powershell - T1086 Denial Of Service
Show in Graph
Common Information
Type Value
UUID 0cd1fb0e-f5b2-4368-92b4-6254b44a6b78
Fingerprint 24b8adc047b7b331
Analysis status DONE
Considered CTI value 2
Text language
Published May 26, 2022, 2 p.m.
Added to db Oct. 9, 2022, 4:17 p.m.
Last updated Oct. 23, 2024, 12:21 p.m.
Headline Vulnerability Information
Title Threat Source newsletter (May 26, 2022) — BlackByte adds itself to the grocery list of big game hunters
Detected Hints/Tags/Attributes 51/2/18
Source URLs
Redirection Url
Details Source https://blog.talosintelligence.com/2022/05/threat-source-newsletter-may-26-2022.html
URL Provider
Details Provider Source level domain
Details talosintelligence.com blog.talosintelligence.com
Attributes
Details Type #Events CTI Value
Details Domain 127 
pua.win
Details Domain 36 
85.lp.ret.sbx.tg
Details Domain 1 
w32.8b439cc5bf-95.sbx.tg
Details File 1 
lavasoft_overlay_new_setup_progress_en.exe
Details File 1 
document-launch-powershell.xls
Details File 11 
doc001.exe
Details md5 37 
93fefc3e88ffb78abb36365fa5cf857c
Details md5 8 
2c8ea737a232fd03ab80db672d50a17a
Details md5 1 
f5d20b351d56605bbb51befee989fa6e
Details md5 1 
9b1f8a838b5c195f9cf2f11017e38175
Details md5 11 
df11b3105df8d7c70e7b501e210e3cc3
Details sha256 27 
e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934
Details sha256 8 
125e12c8045689bb2a5dcad6fa2644847156dec8b533ee8a3653b432f8fd5645
Details sha256 1 
1fce2981e0d7d9c85adeea59a637d77555b466d6a6639999c6ae9b254c12dc6b
Details sha256 1 
818d2d5bdde999f70563c16bfa9c724897d3b01adc67089137ae97d8f7ab6ba3
Details sha256 11 
59f1e69b68de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaa
Details IPv6 36 
c::85
Details IPv6 63 
::1201