PuzzleMaker attacks with Chrome zero-day exploit chain
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Exploits - T1587.004 Exploits - T1588.005 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID 59711084-06f1-4958-8ca8-a95f7b2e2ddc
Fingerprint f0301856e8b795e3
Analysis status DONE
Considered CTI value 2
Text language
Published June 8, 2021, 5:32 p.m.
Added to db Sept. 11, 2022, 12:41 p.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline PuzzleMaker attacks with Chrome zero-day exploit chain
Title PuzzleMaker attacks with Chrome zero-day exploit chain
Detected Hints/Tags/Attributes 46/2/19
Source URLs
Redirection Url
Details Source https://securelist.com/puzzlemaker-chrome-zero-day-exploit-chain/102771/
URL Provider
Details Provider Source level domain
Details securelist.com securelist.com
Attributes
Details Type #Events CTI Value
Details CVE 13 
cve-2021-31955
Details CVE 16 
cve-2021-31956
Details CVE 9 
cve-2021-21220
Details CVE 7 
cve-2021-21224
Details Domain 2 
media-seoengine.com
Details Domain 338 
kaspersky.com
Details Email 147 
intelreports@kaspersky.com
Details File 125 
ntoskrnl.exe
Details File 17 
ntfs.sys
Details File 1206 
index.php
Details File 2 
wmiprvmon.exe
Details File 2 
wmimon.dll
Details md5 1 
09A5055DB44FC1C9E3ADD608EFFF038C
Details md5 1 
D6B850C950379D5EE0F254F7164833E8
Details sha1 2 
bffa4462901b74dbfbffaa3a3db27daa61211412
Details sha1 2 
e63ed3b56a5f9a1ea5c92d3d2444196ea13be94b
Details sha256 2 
982f7c4700c75b81833d5d59ad29147c392b20c760fe36b200b541a0f841c8a9
Details sha256 2 
8a17279ba26c8fbe6966ea3300fdefb1adae1b3ed68f76a7fc81413bd8c1a5f6
Details Url 1 
https://p{removed}/metrika_upload/index.php