US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware
Tags
country: Russia Ukraine United States Of America
attack-pattern: Data Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Web Shell - T1505.003 Tool - T1588.002 Brute Force - T1110 Web Shell - T1100
Show in Graph
Common Information
Type Value
UUID 1d067143-c51d-40ec-b047-f774cfd92ce6
Fingerprint 85151c119d73a3d1
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 30, 2016, 2:01 p.m.
Added to db Jan. 19, 2023, 12:01 a.m.
Last updated Nov. 14, 2024, 10:54 p.m.
Headline US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware
Title US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware
Detected Hints/Tags/Attributes 62/2/7
Source URLs
Redirection Url
Details Source https://www.wordfence.com/blog/2016/12/russia-malware-ip-hack/
URL Provider
Details Provider Source level domain
Details wordfence.com www.wordfence.com
Attributes
Details Type #Events CTI Value
Details Domain 12 
dcleaks.com
Details Domain 1 
profexer.name
Details Domain 45 
wordfence.com
Details Email 1 
press@wordfence.com
Details File 98 
download.php
Details File 65 
info.txt
Details Url 1 
http://profexer.name/pas/download.php