Tj-actions/changed-files with Falco Actions
Tags
attack-pattern: Data Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Proc Filesystem - T1003.007 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID 5d379fc5-b9c6-41ac-ad46-9ea7db6a5584
Fingerprint bcf4e599ed322160
Analysis status DONE
Considered CTI value 2
Text language
Published April 10, 2025, 1:50 p.m.
Added to db April 10, 2025, 4:17 p.m.
Last updated April 15, 2025, 4:15 p.m.
Headline Tj-actions/changed-files with Falco Actions
Title Tj-actions/changed-files with Falco Actions
Detected Hints/Tags/Attributes 33/1/10
Source URLs
Redirection Url
Details Source https://malware.news/t/tj-actions-changed-files-with-falco-actions/93052
URL Provider
Details Provider Source level domain
Details malware.news malware.news
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 158 ✔ Malware Analysis, News and Indicators - Latest topics https://malware.news/latest.rss 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 31 
cve-2025-30066
Details Domain 5 
memdump.py
Details Domain 22 
fd.name
Details Domain 54 
proc.name
Details Domain 26 
proc.pid
Details Domain 12 
gist.githubusercontent.com
Details File 5 
memdump.py
Details File 16 
%proc.exe
Details sha1 2 
f67ddcc4b202aae0ab3d7194159c9c947ae77791
Details sha1 2 
eb3c72d826fc4f9a9af40679c867cfdcf2e88012