APT42 malware campaign targets Windows and macOS
Tags
cmtmf-attack-pattern: Masquerading
country: Iran
attack-pattern: Applescript - T1059.002 Impersonation - T1656 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Template Injection - T1221 Applescript - T1155 Masquerading - T1036 Powershell - T1086 Masquerading
Show in Graph
Common Information
Type Value
UUID 518415c0-573b-423d-9713-15e4fe440a2e
Fingerprint 2106af8787beedc9
Analysis status DONE
Considered CTI value 2
Text language
Published July 8, 2023, midnight
Added to db July 8, 2023, 4 p.m.
Last updated Nov. 17, 2024, 5:50 p.m.
Headline APT42 malware campaign targets Windows and macOS
Title APT42 malware campaign targets Windows and macOS
Detected Hints/Tags/Attributes 38/3/12
Source URLs
Redirection Url
Details Source https://andreafortuna.org/2023/07/08/apt42-malware-campaign-targets-windows-and-macos/
URL Provider
Details Provider Source level domain
Details andreafortuna.org andreafortuna.org
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 13 ✔ Andrea Fortuna https://andreafortuna.org/feed.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 6 
library-store.camdvr.org
Details Domain 3 
filemanager.theworkpc.com
Details Domain 7 
fuschia-rhinestone.cleverapps.io
Details sha256 3 
464c5cd7dd4f32a0893b9fff412b52165855a94d193c08b114858430c26a9f1d
Details sha256 3 
ddead6e794b72af26d23065c463838c385a8fdff9fb1b8940cd2c23c3569e43b
Details sha256 2 
1fb7f1bf97b72379494ea140c42d6ddd53f0a78ce22e9192cfba3bae58251da4
Details sha256 2 
e98afa8550f81196e456c0cd4397120469212e190027e33a1131f602892b5f79
Details sha256 2 
5dc7e84813f0dae2e72508d178aed241f8508796e59e33da63bd6b481f507026
Details sha256 2 
b6916b5980e79a2d20b4c433ad8e5e34fe9683ee61a42b0730effc6f056191eb
Details sha256 2 
acfa8a5306b702d610620a07040262538dd59820d5a42cf01fd9094ce5c3487c
Details IPv4 4 
144.217.129.176
Details Threat Actor Identifier - APT 121 
APT42