SolarStorm Supply Chain Attack Timeline
Tags
cmtmf-attack-pattern: Supply Chain Compromise
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Phishing - T1660 Phishing - T1566 Saml Tokens - T1606.002 Server - T1583.004 Server - T1584.004 Software - T1592.002 Supply Chain Compromise - T1474 Tool - T1588.002 Vulnerabilities - T1588.006 Supply Chain Compromise - T1195 Supply Chain Compromise
Show in Graph
Common Information
Type Value
UUID 362579d4-6a57-481c-8a94-8bccf277297b
Fingerprint e41301d90e3e92cb
Analysis status DONE
Considered CTI value 2
Text language
Published Dec. 23, 2020, 5:15 p.m.
Added to db Sept. 1, 2024, 10:29 a.m.
Last updated Nov. 15, 2024, 12:49 a.m.
Headline SolarStorm Supply Chain Attack Timeline
Title SolarStorm Supply Chain Attack Timeline
Detected Hints/Tags/Attributes 91/4/41
Source URLs
Redirection Url
Details Redirection https://unit42.paloaltonetworks.com/solarstorm-supply-chain-attack-timeline
Details Source https://unit42.paloaltonetworks.com/solarstorm-supply-chain-attack-timeline/
URL Provider
Details Provider Source level domain
Details paloaltonetworks.com unit42.paloaltonetworks.com
Attributes
Details Type #Events CTI Value
Details CVE 17 
cve-2020-4006
Details Domain 16 
incomeupdate.com
Details Domain 50 
avsvmcloud.com
Details Domain 5 
mobilnweb.com
Details Domain 287 
yahoo.com
Details Domain 14 
zupertech.com
Details Domain 15 
highdatabase.com
Details Domain 10 
solartrackingsystem.net
Details Domain 12 
webcodez.com
Details Domain 16 
panhardware.com
Details Domain 13 
websitetheme.com
Details Domain 18 
thedoccloud.com
Details Domain 12 
seobundlekit.com
Details Domain 18 
freescanonline.com
Details Domain 19 
deftsecurity.com
Details Domain 12 
virtualwebdata.com
Details Domain 11 
digitalcollege.org
Details Domain 15 
databasegalore.com
Details Domain 12 
lcomputers.com
Details Domain 25 
www.cyberthreatalliance.org
Details File 1 
91018.png
Details File 2 
%windir%\syswow64\msinfo32.exe
Details File 1 
%windir%\sysnative\control.exe
Details sha1 2 
66576709a11544229e83b9b4724fad485df143ad
Details sha1 2 
849296c5f8a28c3da2abe79b82f99a99b40f62ce
Details sha1 3 
e7f2ec0d868d84a331f2805da0d989ad06b825a1
Details sha1 2 
8296028c0ee55235a2c8be8c65e10bf1ea9ce84f
Details sha1 3 
91b9991c10b1db51ecaa1e097b160880f0169e0c
Details sha1 3 
ab93a66c401be78a4098608d8186a13b27db8e8d
Details sha1 2 
12d986a7f4a7d2f80aaf0883ec3231db3e368480
Details sha1 3 
fdb879a2ce7e2cda26bec8b37d2b9ec235fade44
Details sha1 3 
d400021536d712cbe55ceab7680e9868eb70de4a
Details sha1 2 
2c2ce936dd512b70f6c3de7c0f64f361319e9690
Details sha1 1 
af6268f675ed810d804745970927e36d12ac9b0a
Details sha1 1 
b654148983439e28802166449a8f413b9c995547
Details sha1 2 
35aeff24dfa2f3e9250fc874c4e6c9f27c87c40a
Details sha1 1 
b80b01ae313c106f70502142f2b2bcffc7e15abd
Details sha1 3 
7f9ec0c7f7a23e565bf067509fbef0cbf94dfba6
Details sha1 3 
2667db3592ac3955e409de83f4b88fb2046386eb
Details sha256 3 
118189f90da3788362fe85eafa555298423e21ec37f147f3bf88c61d4cd46c51
Details Url 4 
https://yahoo.com