The “Red October” Campaign – An Advanced Cyber Espionage Network Targeting Diplomatic and Government Agencies
Tags
country: Afghanistan Armenia United Arab Emirates Azerbaijan Belarus Belgium Bolivia Switzerland Germany Luxembourg Greece India Iran Pakistan Italy Kazakhstan Morocco Uganda Romania Russia Vietnam Turkmenistan Ukraine United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Contact List - T1636.003 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Hardware - T1592.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Sms Messages - T1636.004 Software - T1592.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID 53aebf1f-9e2c-4e8d-939c-617cd960f6af
Fingerprint fd80095b8cb72681
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 14, 2013, 7:48 p.m.
Added to db Sept. 26, 2022, 9:33 a.m.
Last updated Oct. 22, 2024, 8:42 p.m.
Headline The “Red October” Campaign – An Advanced Cyber Espionage Network Targeting Diplomatic and Government Agencies
Title The “Red October” Campaign – An Advanced Cyber Espionage Network Targeting Diplomatic and Government Agencies
Detected Hints/Tags/Attributes 119/3/50
Source URLs
Redirection Url
Details Source https://securelist.com/blog/incidents/57647/the-red-
Details Source https://securelist.com/blog/incidents/57647/the-red-october-campaign
Details Source https://securelist.com/the-red-october-campaign/57647
URL Provider
Details Provider Source level domain
Details securelist.com securelist.com
Attributes
Details Type #Events CTI Value
Details CVE 27 
cve-2009-3129
Details CVE 79 
cve-2010-3333
Details CVE 176 
cve-2012-0158
Details Domain 246 
mail.ru
Details Domain 338 
kaspersky.com
Details Email 1 
theflame@kaspersky.com
Details md5 1 
1f86299628bed519718478739b0e4b0c
Details md5 1 
2672fbba23bf4f5e139b10cacc837e9f
Details md5 1 
350c170870e42dce1715a188ca20d73b
Details md5 1 
396d9e339c1fd2e787d885a688d5c646
Details md5 1 
3ded9a0dd566215f04e05340ccf20e0c
Details md5 1 
44e70bce66cdac5dc06d5c0d6780ba45
Details md5 1 
4bfa449f1a351210d3c5b03ac2bd18b1
Details md5 1 
4ce5fd18b1d3f551a098bb26d8347ffb
Details md5 1 
4daa2e7d3ac1a5c6b81a92f4a9ac21f1
Details md5 1 
50bd553568422cf547539dd1f49dd80d
Details md5 1 
51edea56c1e83bcbc9f873168e2370af
Details md5 1 
5d1121eac9021b5b01570fb58e7d4622
Details md5 1 
5ecec03853616e13475ac20a0ef987b6
Details md5 1 
5f9b7a70ca665a54f8879a6a16f6adde
Details md5 1 
639760784b3e26c1fe619e5df7d0f674
Details md5 1 
65d277af039004146061ff01bb757a8f
Details md5 1 
6b23732895daaad4bd6eae1d0b0fef08
Details md5 1 
731c68d2335e60107df2f5af18b9f4c9
Details md5 1 
7e5d9b496306b558ba04e5a4c5638f9f
Details md5 1 
82e518fb3a6749903c8dc17287cebbf8
Details md5 1 
85baebed3d22fa63ce91ffafcd7cc991
Details md5 1 
91ebc2b587a14ec914dd74f4cfb8dd0f
Details md5 1 
93d0222c8c7b57d38931cfd712523c67
Details md5 1 
9950a027191c4930909ca23608d464cc
Details md5 1 
9b55887b3e0c7f1e41d1abdc32667a93
Details md5 1 
9f470a4b0f9827d0d3ae463f44b227db
Details md5 1 
a7330ce1b0f89ac157e335da825b22c7
Details md5 1 
b9238737d22a059ff8da903fbc69c352
Details md5 1 
c78253aefcb35f94acc63585d7bfb176
Details md5 1 
fc3c874bdaedf731439bbe28fc2e6bbe
Details md5 1 
bb2f6240402f765a9d0d650b79cd2560
Details md5 1 
bd05475a538c996cd6cafe72f3a98fae
Details md5 1 
c42627a677e0a6244b84aa977fbea15d
Details md5 1 
cb51ef3e541e060f0c56ac10adef37c3
Details md5 1 
ceac9d75b8920323477e8a4acdae2803
Details md5 1 
cee7bd726bc57e601c85203c5767293c
Details md5 1 
d71a9d26d4bb3b0ed189c79cd24d179a
Details md5 1 
d98378db4016404ac558f9733e906b2b
Details md5 1 
dc4a977eaa2b62ad7785b46b40c61281
Details md5 1 
dc8f0d4ecda437c3f870cd17d010a3f6
Details md5 1 
de56229f497bf51274280ef84277ea54
Details md5 1 
ec98640c401e296a76ab7f213164ef8c
Details md5 1 
f0357f969fbaf798095b43c9e7a0cfa7
Details md5 1 
f16785fc3650490604ab635303e61de2