Threat Intelligence Report 24th September – 30th September 2024
Tags
cmtmf-attack-pattern: Scheduled Task/Job
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Data Encrypted For Impact - T1471 Data Encrypted For Impact - T1486 Dns - T1071.004 Dns - T1590.002 File And Directory Discovery - T1420 File And Directory Permissions Modification - T1222 File Deletion - T1070.004 File Deletion - T1630.002 Linux And Mac File And Directory Permissions Modification - T1222.002 Malware - T1587.001 Malware - T1588.001 System Information Discovery - T1426 Phishing - T1660 Phishing - T1566 Remote Desktop Protocol - T1021.001 Scheduled Task - T1053.005 Scheduled Task/Job - T1603 Software - T1592.002 Vulnerabilities - T1588.006 Brute Force - T1110 External Remote Services - T1133 File And Directory Discovery - T1083 File Deletion - T1107 Indicator Removal On Host - T1070 Remote Desktop Protocol - T1076 Scheduled Task - T1053 System Information Discovery - T1082 External Remote Services
Show in Graph
Common Information
Type Value
UUID 56581322-9725-4401-b224-8b697d6b5146
Fingerprint 84728d518473aeab
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 30, 2024, midnight
Added to db Sept. 30, 2024, 9:53 a.m.
Last updated Oct. 11, 2024, 7:27 a.m.
Headline Threat Intelligence Report September 24 - September 30 2024
Title Threat Intelligence Report 24th September – 30th September 2024
Detected Hints/Tags/Attributes 135/3/27
Source URLs
Redirection Url
Details Source https://redpiranha.net/news/threat-intelligence-report-september-24-september-30-2024
URL Provider
Details Provider Source level domain
Details redpiranha.net redpiranha.net
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 482 ✔ Red Piranha https://redpiranha.net/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 35 
cve-2024-7593
Details Domain 1 
rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
Details Domain 1 
rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion
Details File 1 
criticalbreachdetected.txt
Details File 3 
archive.php
Details sha1 7 
69b3d913a3967153d1e91ba1a31ebed839b297ed
Details sha1 5 
338d4f4ec714359d589918cee1adad12ef231907
Details sha1 5 
b07f6a5f61834a57304ad4d885bd37d8e1badba8
Details sha1 1 
39649fa040a3c6894758016a65afec7b6acd4017
Details sha1 1 
4947cf015875b169b6509a279941e854b022dd8e
Details sha1 1 
96dc78c00a622c3df5e038b8ed41b2de68e6c350
Details sha1 1 
df96143540d36edf1b9d9d25d91778855cafa8a6
Details sha1 1 
a1034cdc499b4c551e43bc259d10928d75293214
Details sha1 1 
de52c40ca449c7285660541c84ac5d6fe78a6bff
Details sha1 1 
e14ee9ad241517ef72a4c6561fb848f6d659e764
Details MITRE ATT&CK Techniques 172 
T1133
Details MITRE ATT&CK Techniques 245 
T1053.005
Details MITRE ATT&CK Techniques 257 
T1070.004
Details MITRE ATT&CK Techniques 24 
T1222.002
Details MITRE ATT&CK Techniques 538 
T1083
Details MITRE ATT&CK Techniques 943 
T1082
Details MITRE ATT&CK Techniques 411 
T1486
Details Url 1 
https://forum.redpiranha.net/t/known-exploited-vulnerabilities-catalog-4th-week-of-september-2024/508
Details Url 1 
http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
Details Url 1 
http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/archive.php
Details Url 1 
http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/archive.php?auction
Details Url 1 
http://rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion