Malware Campaigns Targeting African Banking Sector | HP Wolf Security
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Email Account - T1087.003 Html Smuggling - T1027.006 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Visual Basic - T1059.005 Tool - T1588.002 Whois - T1596.002 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 238b6eb3-ce5a-4819-9747-9253a5be5011
Fingerprint ac052c1b0f3386cd
Analysis status DONE
Considered CTI value 2
Text language
Published April 12, 2022, 7 a.m.
Added to db Sept. 11, 2022, 12:47 p.m.
Last updated Nov. 18, 2024, 1:24 p.m.
Headline Malware Campaigns Targeting African Banking Sector
Title Malware Campaigns Targeting African Banking Sector | HP Wolf Security
Detected Hints/Tags/Attributes 76/2/17
Source URLs
Redirection Url
Details Source https://threatresearch.ext.hp.com/malware-campaigns-targeting-african-banking-sector/
URL Provider
Details Provider Source level domain
Details hp.com threatresearch.ext.hp.com
Attributes
Details Type #Events CTI Value
Details Domain 67 
www.dropbox.com
Details Domain 1 
afbd-bad.org
Details Domain 1 
afdb-bad.org
Details Domain 1 
afdb-za.org
Details File 1 
dossiers.htm
Details File 1 
bad.iso
Details File 1 
candidature.vbs
Details File 1212 
powershell.exe
Details File 1 
rmss_umuigf84.bin
Details sha256 1 
9af5400545853d895f82b0259a7dafd0a9c1465c374b0925cc83f14dd29b29c5
Details sha256 1 
7079ff76eb4b9d891fd04159008c477f6c7b10357b5bba52907c2eb0645887aa
Details sha256 1 
43aaa7f39e9bb4039f70daf61d84b4cde2b3273112f9d022242f841a4829da03
Details sha256 1 
0407eab084e910bdd6368f73b75ba2e951e3b545d0c9477e6971ffe6a52a273a
Details sha256 1 
d681b39362fae43843b1c6058c0aa8199673052507e5c500b7361c935037e05e
Details sha256 1 
5d45422cf2c38af734cee5a5c9fa2fef005f9409d5d5b74814aea1a5f246835d
Details Url 1 
https://onedrive.live.com/download?cid=50d26408c26a8b34&resid=50d26408c26a8b34
Details Url 1 
https://www.dropbox.com/s/veqimnoofpaqmx1/rmss_umuigf84.bin?dl=1