Infected PowerPoint Files Using Cloud Services to Deliver Multiple Malware
Tags
cmtmf-attack-pattern: Process Injection
maec-delivery-vectors: Watering Hole
attack-pattern: Data Clipboard Data - T1414 Cloud Services - T1021.007 Cmstp - T1218.003 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Mshta - T1218.005 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Process Injection - T1631 Python - T1059.006 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Clipboard Data - T1115 Cmstp - T1191 Mshta - T1170 Powershell - T1086 Process Injection - T1055 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 607119da-f5dd-4276-a191-d3e71921a309
Fingerprint a0202c61efac8782
Analysis status DONE
Considered CTI value 0
Text language
Published Jan. 24, 2022, 2 p.m.
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Oct. 16, 2024, 2:41 a.m.
Headline Infected PowerPoint Files Using Cloud Services to Deliver Multiple Malware
Title Infected PowerPoint Files Using Cloud Services to Deliver Multiple Malware
Detected Hints/Tags/Attributes 47/3/2
Source URLs
Redirection Url
Details Source https://www.netskope.com/blog/infected-powerpoint-files-using-cloud-services-to-deliver-multiple-malware
URL Provider
Details Provider Source level domain
Details netskope.com www.netskope.com
Attributes
Details Type #Events CTI Value
Details Domain 27 
gen.malware.detect.by
Details File 40 
aspnet_compiler.exe