Rewterz Threat Advisory – Bank Servers Hacked to cause ATM cash-out - Rewterz
Tags
| attack-pattern: | Credentials - T1589.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Denial Of Service |
Common Information
| Type | Value |
|---|---|
| UUID | 0f4cef16-5ca2-451f-9855-300adcae3bdf |
| Fingerprint | d508978964072e8f |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Oct. 8, 2018, 4:37 p.m. |
| Added to db | Dec. 19, 2024, 5:43 a.m. |
| Last updated | Dec. 25, 2024, 1:28 p.m. |
| Headline | Rewterz Threat Advisory – Bank Servers Hacked to cause ATM cash-out |
| Title | Rewterz Threat Advisory – Bank Servers Hacked to cause ATM cash-out - Rewterz |
| Detected Hints/Tags/Attributes | 43/1/15 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 87 | rewterz.com |
|
| Details | 32 | info@rewterz.com |
||
| Details | sha256 | 1 | ab88f12f0a30b4601dc26dbae57646efb77d5c6382fb25522c529437e5428629 |
|
| Details | sha256 | 1 | 9ddacbcd0700dc4b9babcd09ac1cebe23a0035099cb612e6c85ff4dffd087a26 |
|
| Details | sha256 | 1 | 4a740227eeb82c20286d9c112ef95f0c1380d0e90ffb39fc75c8456db4f60756 |
|
| Details | sha256 | 1 | 1f2cd2bc23556fb84a51467fedb89cbde7a5883f49e3cfd75a241a6f08a42d6d |
|
| Details | sha256 | 1 | a9bc09a17d55fc790568ac864e3885434a43c33834551e027adb1896a463aafc |
|
| Details | sha256 | 2 | d465637518024262c063f4a82d799a4e40ff3381014972f24ea18bc23c3b27ee |
|
| Details | sha256 | 4 | 3a5ba44f140821849de2d82d5a137c3bb5a736130dddb86b296d94e6b421594c |
|
| Details | sha256 | 1 | e03dc5f1447f243cf1f305c58d95000ef4e7dbcc5c4e91154daa5acd83fea9a8 |
|
| Details | sha256 | 1 | f3e521996c85c0cdb2bfb3a0fd91eb03e25ba6feef2ba3a1da844f1b17278dd2 |
|
| Details | sha256 | 2 | ca9ab48d293cc84092e8db8f0ca99cb155b30c61d32a1da7cd3687de454fe86c |
|
| Details | sha256 | 4 | 10ac312c8dd02e417dd24d53c99525c29d74dcbc84730351ad7a4e0a4b1a0eba |
|
| Details | IPv4 | 1 | 75.99.63.27 |
|
| Details | Threat Actor Identifier - APT | 179 | APT38 |