Threat Source newsletter (Feb. 11, 2021)
Tags
country: Iran Poland
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Dns Server - T1583.002 Dns Server - T1584.002 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Sharepoint - T1213.002 Software - T1592.002 Vulnerabilities - T1588.006 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 5af7a1d2-5096-4e82-8b3e-850366224adf
Fingerprint b5b22800ca86d2c7
Analysis status DONE
Considered CTI value 2
Text language
Published Feb. 11, 2021, 2 p.m.
Added to db Oct. 9, 2022, 4:19 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Vulnerability Information
Title Threat Source newsletter (Feb. 11, 2021)
Detected Hints/Tags/Attributes 64/3/11
Source URLs
Redirection Url
Details Source https://blog.talosintelligence.com/2021/02/threat-source-newsletter-feb-11-2021.html
URL Provider
Details Provider Source level domain
Details talosintelligence.com blog.talosintelligence.com
Attributes
Details Type #Events CTI Value
Details Domain 31 
5a5226262.auto
Details Domain 127 
pua.win
Details File 1122 
svchost.exe
Details File 41 
santivirusservice.exe
Details File 28 
ww31.exe
Details File 16 
flashhelperservice.exe
Details md5 58 
8c80dd97c37525927c1e549cb59bcbf3
Details md5 37 
34560233e751b7e95f155b6f61e7419a
Details md5 27 
9a4b7b0849a274f6f7ac13c7577daad8
Details md5 4 
f37167c1e62e78b0a222b8cc18c20ba7
Details md5 2 
88781be104a4dcb13846189a2b1ea055