Category
Tags
cmtmf-attack-pattern: Masquerading
country: China North Korea Germany Hong Kong Iran Israel South Korea Laos Turkey Russia Syria Ukraine United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Artificial Intelligence - T1588.007 Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Dns Poisoning - T1382 Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Kerberoasting - T1558.003 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Steganography - T1001.002 Steganography - T1406.001 Steganography - T1027.003 Visual Basic - T1059.005 Web Shell - T1505.003 Tool - T1588.002 Vulnerabilities - T1588.006 Whois - T1596.002 Connection Proxy - T1090 Hypervisor - T1062 Kerberoasting - T1208 Masquerading - T1036 Powershell - T1086 Remote Access Tools - T1219 Rootkit - T1014 Web Shell - T1100 Masquerading Rootkit
Show in Graph
Common Information
Type Value
UUID 3da065d9-bb8b-489d-b0f4-3ba833190885
Fingerprint 961000cf8ea79fc4
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 7, 2024, midnight
Added to db Nov. 12, 2024, 11:47 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Counter Adversary Operations
Title Category
Detected Hints/Tags/Attributes 318/4/12
Source URLs
Redirection Url
Details Source https://www.crowdstrike.com/en-us/blog/category.counter-adversary-operations/
URL Provider
Details Provider Source level domain
Details crowdstrike.com www.crowdstrike.com
Attributes
Details Type #Events CTI Value
Details CVE 34 
cve-2023-36874
Details CVE 5 
cve-2021-3490
Details CVE 7 
cve-2021-22941
Details CVE 397 
cve-2021-44228
Details CVE 1 
cve-2019-17435
Details CVE 51 
cve-2014-1761
Details CVE 57 
cve-2014-6271
Details CVE 29 
cve-2013-3906
Details Domain 3 
crowdstrike-office365.com
Details IPv4 5 
1.5.0.0
Details Threat Actor Identifier - APT 181 
APT33
Details Threat Actor Identifier - APT 783 
APT28