Targeted Iranian Attacks Against Iraqi Government Infrastructure - Check Point Research
Tags
country: Iraq Pakistan
attack-pattern: Data Dns - T1071.004 Dns - T1590.002 Email Accounts - T1585.002 Email Accounts - T1586.002 Email Addresses - T1589.002 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Tool - T1588.002 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 1160045f-b3ad-4b23-95ae-9b45c030c0f6
Fingerprint 25b4151315b98691
Analysis status DONE
Considered CTI value 1
Text language
Published Sept. 11, 2024, 8:06 p.m.
Added to db Sept. 11, 2024, 10:18 p.m.
Last updated Nov. 15, 2024, 12:35 p.m.
Headline Targeted Iranian Attacks Against Iraqi Government Infrastructure
Title Targeted Iranian Attacks Against Iraqi Government Infrastructure - Check Point Research
Detected Hints/Tags/Attributes 72/2/17
Source URLs
Redirection Url
Details Source https://research.checkpoint.com/2024/iranian-malware-attacks-iraqi-government/
URL Provider
Details Provider Source level domain
Details checkpoint.com research.checkpoint.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 204 ✔ Check Point Research https://research.checkpoint.com/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 3 
iqwebservice.com
Details Domain 4 
gov-iq.net
Details Domain 2 
mail.miicrosoft.com
Details Domain 3 
mofaiq.com
Details Domain 208 
mp.weixin.qq.com
Details Domain 2 
asiacall.net
Details Domain 2 
gov.iq
Details Domain 35 
apt.win
Details File 7 
avamer.pdf
Details File 4 
protocol.pdf
Details File 5 
iraqidoc.docx
Details File 3 
ncms_demo.msi
Details File 17 
exchange.asmx
Details File 9 
cachehttp.dll
Details IPv4 2 
37.1.213.152
Details Threat Actor Identifier - APT 258 
APT34
Details Url 2 
https://mp.weixin.qq.com/s/o_evjbvn2sq1q7cl4ruxoq