Threat Intelligence Report September 10 - September 16 2024 | Red Piranha
Tags
cmtmf-attack-pattern: Application Layer Protocol Endpoint Denial Of Service
maec-delivery-vectors: Watering Hole
attack-pattern: Data Software Discovery - T1418 Application Layer Protocol - T1437 Cloud Services - T1021.007 Credentials - T1589.001 Data Encrypted For Impact - T1471 Data Encrypted For Impact - T1486 Data From Local System - T1533 Defacement - T1491 Endpoint Denial Of Service - T1642 Endpoint Denial Of Service - T1499 Exfiltration Over C2 Channel - T1646 File And Directory Discovery - T1420 Inhibit System Recovery - T1490 Input Capture - T1417 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 System Information Discovery - T1426 Phishing - T1660 Phishing - T1566 Remote Desktop Protocol - T1021.001 Smb/Windows Admin Shares - T1021.002 Software - T1592.002 Software Discovery - T1518 Web Protocols - T1071.001 Web Protocols - T1437.001 Tool - T1588.002 Vulnerabilities - T1588.006 Standard Application Layer Protocol - T1071 Brute Force - T1110 Data From Local System - T1005 Deobfuscate/Decode Files Or Information - T1140 Exfiltration Over Command And Control Channel - T1041 File And Directory Discovery - T1083 Input Capture - T1056 Remote Desktop Protocol - T1076 Remote Services - T1021 Scheduled Task - T1053 System Information Discovery - T1082
Show in Graph
Common Information
Type Value
UUID 2ee669f2-bf75-4ef8-b603-9c1d90a13b76
Fingerprint 8672a9d18fd3a69f
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 16, 2024, midnight
Added to db Sept. 16, 2024, 9:31 a.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline Threat Intelligence Report September 10 - September 16 2024
Title Threat Intelligence Report September 10 - September 16 2024 | Red Piranha
Detected Hints/Tags/Attributes 150/3/28
Source URLs
Redirection Url
Details Source https://redpiranha.net/news/threat-intelligence-report-september-10-september-16-2024
URL Provider
Details Provider Source level domain
Details redpiranha.net redpiranha.net
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 482 ✔ Red Piranha https://redpiranha.net/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 84 
cve-2024-40766
Details CVE 8 
cve-2017-1000253
Details CVE 17 
cve-2016-3714
Details CVE 66 
cve-2024-38217
Details CVE 67 
cve-2024-38014
Details CVE 73 
cve-2024-43491
Details CVE 62 
cve-2024-38226
Details CVE 85 
cve-2024-8190
Details Domain 1 
threeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp2o6raw4rphyad.onion
Details File 4 
bidon_readme.txt
Details File 367 
readme.txt
Details sha256 3 
307a1217aac33c4b7a9cd923162439c19483e952c2ceb15aa82a98b46ff8942e
Details MITRE ATT&CK Techniques 480 
T1053
Details MITRE ATT&CK Techniques 1006 
T1082
Details MITRE ATT&CK Techniques 504 
T1140
Details MITRE ATT&CK Techniques 276 
T1490
Details MITRE ATT&CK Techniques 585 
T1083
Details MITRE ATT&CK Techniques 185 
T1518
Details MITRE ATT&CK Techniques 159 
T1021
Details MITRE ATT&CK Techniques 534 
T1005
Details MITRE ATT&CK Techniques 152 
T1056
Details MITRE ATT&CK Techniques 444 
T1071
Details MITRE ATT&CK Techniques 422 
T1041
Details MITRE ATT&CK Techniques 472 
T1486
Details MITRE ATT&CK Techniques 65 
T1491
Details MITRE ATT&CK Techniques 31 
T1499
Details Url 1 
https://forum.redpiranha.net/t/known-exploited-vulnerabilities-catalog-2nd-week-of-september-2024/506
Details Url 1 
http://threeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp2o6raw4rphyad.onion