Trade with caution - bad guys are stealing
Tags
cmtmf-attack-pattern: Application Layer Protocol
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Models Application Layer Protocol - T1437 Dll Side-Loading - T1574.002 Exploitation For Client Execution - T1658 File Deletion - T1070.004 File Deletion - T1630.002 Hidden Files And Directories - T1564.001 Ingress Tool Transfer - T1544 Malware - T1587.001 Malware - T1588.001 Process Discovery - T1424 System Information Discovery - T1426 Security Software Discovery - T1418.001 Security Software Discovery - T1518.001 Server - T1583.004 Server - T1584.004 Virtualization/Sandbox Evasion - T1497 Whois - T1596.002 Virtualization/Sandbox Evasion - T1633 Standard Application Layer Protocol - T1071 Application Window Discovery - T1010 Dll Side-Loading - T1073 Exploitation For Client Execution - T1203 File Deletion - T1107 Graphical User Interface - T1061 Hidden Files And Directories - T1158 Remote File Copy - T1105 Masquerading - T1036 Standard Non-Application Layer Protocol - T1095 Process Discovery - T1057 Process Injection - T1055 Security Software Discovery - T1063 System Information Discovery - T1082 Graphical User Interface
Show in Graph
Common Information
Type Value
UUID 14ce8b7c-b5cc-4a19-bf29-866d147b968b
Fingerprint 342909186d332e9d
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 28, 2023, midnight
Added to db Oct. 23, 2023, 12:47 a.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline Zscaler Blog
Title Trade with caution - bad guys are stealing
Detected Hints/Tags/Attributes 93/3/49
Source URLs
Redirection Url
Details Source https://www.zscaler.com/blogs/security-research/trade-with-caution
URL Provider
Details Provider Source level domain
Details zscaler.com www.zscaler.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 406 ✔ Security Research | Blog Category Feed https://www.zscaler.com/blogs/feeds/security-research 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 3 
sxvlww.am.files.1drv.com
Details Domain 3 
tradingview.business
Details Domain 7 
tradingview.com
Details Domain 3 
547345733334.zip
Details Domain 84 
www.zscaler.com
Details File 3 
tradingvlev_x32_x64bit.zip
Details File 98 
download.php
Details File 3 
tradingvlev_x32_x64bit.exe
Details File 3 
scintilla.dll
Details File 10 
bot.exe
Details File 3 
547345733334.zip
Details File 104 
sqlite3.dll
Details File 44 
freebl3.dll
Details File 51 
mozglue.dll
Details File 71 
nss3.dll
Details File 41 
softokn3.dll
Details File 51 
msvcp140.dll
Details File 69 
vcruntime140.dll
Details md5 3 
467d42eca35c0571c30d3f20700d9dff
Details md5 3 
16857afad0b6c40469e5d9d9b63a2927
Details md5 3 
55552ed60bddd332eee8a23f0494174f
Details md5 3 
4d7f538bf21bf0c42fee87d28d3f3079
Details md5 3 
0743250f8bb1a0baa01affcfd963d171
Details md5 3 
30e8151b350f29168e37e1eea06ed1b4
Details md5 3 
fc99ea424df48f2b661219b71f33b979
Details sha1 3 
e26512838e6ffb8af84743ae37821694cd380003
Details sha1 3 
63fb7fe4f171bd6dde774ae9365d91ac132616af
Details sha1 3 
1a70718eefa2aef42f4b09577aea7b43ff874e02
Details sha256 3 
9abdfcea109db4763065fee6d3e87299f03f57dba0307c67ad10cd86f0f2acf3
Details sha256 3 
f4c166dddefd29eb457d0a7b426928b1123626c6c1568bc998440dac72a816b7
Details IPv4 3 
85.208.136.162
Details IPv4 3 
212.8.246.70
Details IPv4 3 
95.217.31.208
Details MITRE ATT&CK Techniques 245 
T1203
Details MITRE ATT&CK Techniques 227 
T1574.002
Details MITRE ATT&CK Techniques 440 
T1055
Details MITRE ATT&CK Techniques 348 
T1036
Details MITRE ATT&CK Techniques 297 
T1070.004
Details MITRE ATT&CK Techniques 238 
T1497
Details MITRE ATT&CK Techniques 94 
T1564.001
Details MITRE ATT&CK Techniques 75 
T1010
Details MITRE ATT&CK Techniques 433 
T1057
Details MITRE ATT&CK Techniques 1006 
T1082
Details MITRE ATT&CK Techniques 141 
T1518.001
Details MITRE ATT&CK Techniques 444 
T1071
Details MITRE ATT&CK Techniques 159 
T1095
Details MITRE ATT&CK Techniques 492 
T1105
Details Url 3 
https://tradingview.business/download.php
Details Url 3 
https://www.zscaler.com/blogs/security-research/demystifying-full-attack-chain-minebridge-rat