RaaS Princess Evolution Looking for Affiliates
Tags
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID 3d99ed38-ceef-487a-9b0b-67e26b18edff
Fingerprint 3fb11199ce307ec7
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 9, 2018, midnight
Added to db Oct. 15, 2024, 5:18 p.m.
Last updated Oct. 15, 2024, 5:19 p.m.
Headline RaaS Princess Evolution Looking for Affiliates
Title RaaS Princess Evolution Looking for Affiliates
Detected Hints/Tags/Attributes 48/3/12
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_ca/research/18/h/ransomware-as-a-service-princess-evolution-looking-for-affiliates.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
greatchina.ga
Details Domain 1 
princessno1.tk
Details Domain 1 
smokeweedeveryday.tk
Details sha256 1 
1408a24b74949922cc65164eea0780449c2d02bb6123fd992b2397f1873afd21
Details sha256 1 
981cf7d1b1b2c23d7717ba93a50fc1889ae78ee378dbb1cbfff3fd0fe11d0cbc
Details sha256 1 
8fc9353cc0c15704f016bc1c1b05961ab267b6108cfa26725df19a686ec2ad28
Details sha256 1 
6502e8d9c49cc653563ea75f03958900543430be7b9c72e93fd6cf0ebd5271bc
Details IPv4 1 
167.114.195.0
Details IPv4 1 
188.225.34.86
Details IPv4 1 
178.32.201.161
Details Url 1 
http://188.225.34.86
Details Url 1 
http://178.32.201.161