Rewterz Threat Alert – APT Group Gamaredon aka Shuckworm – Active IOCs - Rewterz
Tags
country: China Russia Ukraine
attack-pattern: Data Credentials - T1589.001 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Template Injection - T1221 Vulnerabilities - T1588.006 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 3df99755-d0e9-4aef-8614-2673cf320054
Fingerprint 2f9305d5c1958f09
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 13, 2023, 11:23 a.m.
Added to db Dec. 19, 2024, 7:47 a.m.
Last updated Dec. 19, 2024, 8:21 p.m.
Headline Rewterz Threat Alert – APT Group Gamaredon aka Shuckworm – Active IOCs
Title Rewterz Threat Alert – APT Group Gamaredon aka Shuckworm – Active IOCs - Rewterz
Detected Hints/Tags/Attributes 41/2/7
Source URLs
Redirection Url
Details Source https://www.rewterz.com/rewterz-news/rewterz-threat-alert-apt-group-gamaredon-aka-shuckworm-active-iocs-21
Details Redirection https://www.rewterz.com/rewterz-news/rewterz-threat-alert-apt-group-gamaredon-aka-shuckworm-active-iocs-21/
URL Provider
Details Provider Source level domain
Details rewterz.com www.rewterz.com
Attributes
Details Type #Events CTI Value
Details CVE 5 
cve-2023-44981
Details Domain 2 
intelligence56.wokoras.ru
Details Domain 3 
wokoras.ru
Details md5 1 
c23f426ff1d6ee3e0c8f6aa06b7f7442
Details sha1 1 
87cbd7c123e48d64936ac925177f8b5e069296dc
Details sha256 1 
a357794252b4545ba0e65bb34af8f18503ff0e2301cbfc5f5c59cd6fa6b535c8
Details Url 2 
http://intelligence56.wokoras.ru/desktop-da2tu05/alloy.3da