GlobalShadow Trojan IOCs - SEC-1275-1
Tags
| attack-pattern: | Domains - T1583.001 Domains - T1584.001 Powershell - T1059.001 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | 4e2ce17f-72ac-4dda-bdb8-ff70e7160e33 |
| Fingerprint | 1c3cf983d302a15d |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Sept. 20, 2024, midnight |
| Added to db | Sept. 20, 2024, 11:48 a.m. |
| Last updated | Nov. 13, 2024, 12:37 a.m. |
| Headline | GlobalShadow Trojan IOCs |
| Title | GlobalShadow Trojan IOCs - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 6/1/8 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://1275.ru/ioc/3985/globalshadow-trojan-iocs/?mtm_campaign=rss |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 3 | portal.sharjahconnect.online |
|
| Details | Domain | 5 | tdyfbwxngpmixjiqtjjote3k9qwc31dsx.oast.fun |
|
| Details | File | 208 | setup.exe |
|
| Details | sha1 | 2 | 72cdd3856a3ffd530db50e0f48e71f089858e44f |
|
| Details | sha1 | 2 | 79b38c4be5ac888e38ec5f21ac3710f3d0936a72 |
|
| Details | IPv4 | 6 | 94.131.108.78 |
|
| Details | Url | 2 | http://94.131.108.78:7118/b/desktop |
|
| Details | Url | 2 | http://94.131.108.78:7118/b/hi |