Monthly Threat Actor Group Intelligence Report, May 2024 (JPN) – Red Alert
Tags
attack-pattern: Powershell - T1059.001 Process Hollowing - T1055.012 Steganography - T1001.002 Steganography - T1406.001 Steganography - T1027.003 Visual Basic - T1059.005 Template Injection - T1221 Powershell - T1086 Process Hollowing - T1093
Show in Graph
Common Information
Type Value
UUID 3b0de348-db2b-4c73-8e43-03a3373b818c
Fingerprint 45f02d45c9f895e
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 19, 2024, midnight
Added to db Aug. 31, 2024, 4:05 a.m.
Last updated Nov. 12, 2024, 11:47 a.m.
Headline Monthly Threat Actor Group Intelligence Report, May 2024 (JPN)
Title Monthly Threat Actor Group Intelligence Report, May 2024 (JPN) – Red Alert
Detected Hints/Tags/Attributes 24/1/11
Source URLs
Redirection Url
Details Source https://redalert.nshc.net/2024/08/19/monthly-threat-actor-group-intelligence-report-may-2024-jpn/
URL Provider
Details Provider Source level domain
Details nshc.net redalert.nshc.net
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 201 ✔ Red Alert https://redalert.nshc.net/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 52 
cve-2021-21972
Details Domain 32 
nshc.net
Details Email 27 
service@nshc.net
Details Threat Actor Identifier by Red Alert 33 
SectorA02
Details Threat Actor Identifier by Red Alert 17 
SectorA04
Details Threat Actor Identifier by Red Alert 50 
SectorA05
Details Threat Actor Identifier by Red Alert 8 
SectorC02
Details Threat Actor Identifier by Red Alert 30 
SectorE04
Details Threat Actor Identifier by Red Alert 22 
SectorJ06
Details Threat Actor Identifier by Red Alert 7 
SectorJ61
Details Threat Actor Identifier by Red Alert 3 
SectorJ85