IOC Nedir? Siber Güvenlikte Tehditlerin İzini Sürmek
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Ssh - T1021.004 Brute Force - T1110 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 4c75d9a6-db53-4a60-bce6-0bb5d8511183
Fingerprint ca9cf60d81ba3a3a
Analysis status DONE
Considered CTI value 1
Text language
Published Jan. 10, 2025, 10:06 p.m.
Added to db Jan. 10, 2025, 11:45 p.m.
Last updated Jan. 18, 2025, 9:32 p.m.
Headline IOC Nedir? Siber Güvenlikte Tehditlerin İzini Sürmek
Title IOC Nedir? Siber Güvenlikte Tehditlerin İzini Sürmek
Detected Hints/Tags/Attributes 34/2/17
Source URLs
Redirection Url
Details Source https://medium.com/@huseyin.yucesoy/ioc-nedir-siber-g%C3%BCvenlikte-tehditlerin-i%CC%87zini-s%C3%BCrmek-531a24defed8?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
neon9.top
Details Domain 1 
httsupply.com
Details Domain 1 
fake.mediumserver.com
Details Domain 1042 
example.com
Details Domain 1311 
any.run
Details File 5 
c:\windows\perfc.dat
Details File 1 
invoice-oct-47521.doc
Details File 6 
landing.php
Details md5 1 
2ccef1e9c1b5b7aadcb2c387705fc7c9
Details IPv4 1 
185.92.220.195
Details IPv4 1 
198.51.100.99
Details IPv4 1 
91.234.35.82
Details IPv4 12 
192.168.1.200
Details Threat Actor Identifier - APT 834 
APT29
Details Url 1 
http://httsupply.com/f/docs/invoice-oct-47521.doc
Details Url 1 
http://example.com/landing.php?id=10234
Details Windows Registry Key 3 
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\svchost