Finding the unknown unknowns, part 1
Tags
| country: | Australia Israel Italy Turkey Ukraine |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Data Software - T1592.002 Vnc - T1021.005 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 4942309d-b42b-4927-af4e-7c5ab49b8ac2 |
| Fingerprint | 225d90111d34438f |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | April 20, 2024, noon |
| Added to db | Aug. 31, 2024, 10:59 a.m. |
| Last updated | Nov. 17, 2024, 5:55 p.m. |
| Headline | Search |
| Title | Finding the unknown unknowns, part 1 |
| Detected Hints/Tags/Attributes | 50/3/55 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://blog.strikeready.com/blog/finding-the-unknown-unknowns-part-1/ |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 443 | ✔ | StrikeReady Labs on StrikeReady Blog | https://blog.strikeready.com/contributors/strikeready-labs/index.xml | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | airalgerie.dz |
|
| Details | Domain | 1 | kjghfkfgfdytku.infinityfreeapp.com |
|
| Details | Domain | 49 | ukr.net |
|
| Details | Domain | 4 | gorod.dp.ua |
|
| Details | Domain | 6 | run.mocky.io |
|
| Details | Domain | 154 | urlscan.io |
|
| Details | Domain | 14 | ipapi.co |
|
| Details | Domain | 1 | data.country |
|
| Details | Domain | 1 | windows-kb5021042.cab |
|
| Details | Domain | 14 | ibb.co |
|
| Details | Domain | 1 | 3c5a-48a4-957e-6dcb6833a94c.zip |
|
| Details | Domain | 1 | img-912566491.zip |
|
| Details | 1 | ouamar.mounia@airalgerie.dz |
||
| Details | File | 1 | digitalform.rar |
|
| Details | File | 2 | digitalform.msi |
|
| Details | File | 7 | ateraagent.exe |
|
| Details | File | 1 | kjghfkfgfdytku.inf |
|
| Details | File | 1 | image2.php |
|
| Details | File | 1 | windows-kb5021042.cab |
|
| Details | File | 1 | docs_link.zip |
|
| Details | File | 2 | car-for-sale.jpg |
|
| Details | File | 2 | img-387470302099.jpg |
|
| Details | File | 23 | windowscodecs.dll |
|
| Details | File | 2 | zqtxmo.bat |
|
| Details | File | 1 | 0-kb2911993-x64_6e4ef105-3c5a-48a4-957e-6dcb6833a94c.zip |
|
| Details | File | 1 | img-912566491.zip |
|
| Details | File | 1 | lehvtmpegkcczphm.bat |
|
| Details | sha256 | 1 | 8a2d14f60c0e69412856aa697706b9cbb8ceed524e4321c25332dad4618dff1e |
|
| Details | sha256 | 2 | 09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6 |
|
| Details | sha256 | 1 | a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2 |
|
| Details | sha256 | 1 | a3c697da262af1d606faeb5896c1b0f5a0b48c452c3d2afd51f068d68563d743 |
|
| Details | sha256 | 1 | 3281ffd83dccccd3aded58b14eb2196625b509bc49aa45c7b58c6bbfb495653e |
|
| Details | sha256 | 1 | 64e9d8222c98fdc7f2f31428cae1d3172bf55882bed9aa9420f133dbe7fb64d0 |
|
| Details | sha256 | 1 | d76ec936e709f6e1e61827f0e8ca0cd5261202362207e9efcd9a87cdd8c386aa |
|
| Details | sha256 | 1 | f162b9a38fe304e2fba800bb7c1207015f24bf6257f46caa6d587cfc4875ea97 |
|
| Details | sha256 | 1 | a9f84a4d517ea692dc036d9c5c5a577a14f050a6a1780c9974a8064efe33a9c9 |
|
| Details | sha256 | 1 | 043e70796f7f36ca99ced36e473317f02f699b938148396dfd3515092c4d3bd3 |
|
| Details | sha256 | 1 | 0c50f6f2841093a6a27a3c60df8abfa0bdb87d01037840c3633918ae69b2e49f |
|
| Details | sha256 | 1 | a8d9850ac86e0498f6ba3abec5d4bb8366d7a20befffd9134f75332a93c79f7f |
|
| Details | sha256 | 1 | 1c5b7f0d4ea21c5e9413e7ff0f2cf364a560927446af7dac82b16e8e201be1a0 |
|
| Details | sha256 | 2 | cda936ecae566ab871e5c0303d8ff98796b1e3661885afd9d4690fc1e945640e |
|
| Details | sha256 | 3 | c6a91cba00bf87cdb064c49adaac82255cbec6fdd48fd21f9b3b96abf019916b |
|
| Details | sha256 | 2 | 6b96b991e33240e5c2091d092079a440fa1bef9b5aecbf3039bf7c47223bdf96 |
|
| Details | sha256 | 2 | a06d74322a8761ec8e6f28d134f2a89c7ba611d920d080a3ccbfac7c3b61e2e7 |
|
| Details | sha256 | 1 | 0df548e0d1323e228a5608b1c1aff6d683f553ed6752460ac27d5874fa59d3e7 |
|
| Details | sha256 | 1 | 836419b4a81302f60c8abd1a7503f42a1ed449f6635b88272a18eecfa164134e |
|
| Details | sha256 | 1 | 576b40065ab3d7718a5742fa7c739eebda046664528755726364af336fe2eace |
|
| Details | sha256 | 1 | dfed015bb3d47ce851c7cd6cef1b784ea5061e9811fec5416b8db5ea6c9566de |
|
| Details | sha256 | 1 | 2ea042ff11d0f972a2bd3610fcf0a767ff74f7e9f2729354889367554085100a |
|
| Details | Microsoft Patch Numbers | 3 | KB5021042 |
|
| Details | Microsoft Patch Numbers | 1 | KB2911993 |
|
| Details | Url | 1 | http://kjghfkfgfdytku.infinityfreeapp.com/?usr=[removed]@ukr.net |
|
| Details | Url | 1 | https://gorod.dp.ua/eng/hotels/oneplace/image2.php?fotogal=1 |
|
| Details | Url | 1 | https://run.mocky.io/v3/da384ab3-f749-42d5-a076-40c248dece9b |
|
| Details | Url | 2 | https://i.ibb.co/vvscr2z/car-for-sale.jpg |