This Meeting Should Have Been an Email
Tags
cmtmf-attack-pattern: Masquerading
maec-delivery-vectors: Watering Hole
attack-pattern: Data Javascript - T1059.007 Keychain - T1634.001 Keychain - T1555.001 Keychain - T1579 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Keychain - T1142 Masquerading - T1036 Masquerading
Show in Graph
Common Information
Type Value
UUID 6266031c-e0c2-482b-836e-015d95a11eb2
Fingerprint 141e9ed12ff68cc7
Analysis status DONE
Considered CTI value 0
Text language
Published July 15, 2024, midnight
Added to db Aug. 31, 2024, 7:45 a.m.
Last updated Nov. 17, 2024, 10:43 p.m.
Headline UNKNOWN
Title This Meeting Should Have Been an Email
Detected Hints/Tags/Attributes 51/3/22
Source URLs
Redirection Url
Details Source https://objective-see.org/blog/blog_0x7A.html
URL Provider
Details Provider Source level domain
Details objective-see.org objective-see.org
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 186 ✔ Objective-See's Blog https://objective-see.org/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 538 
pic.twitter.com
Details Domain 14 
mirotalk.net
Details Domain 1 
meet.no42.org
Details Domain 1 
mirotalk.app
Details Domain 21 
filemonitor.app
Details Domain 1 
main99.py
Details File 2 
mirotalk.dmg
Details File 13 
login.key
Details File 65 
python.exe
Details File 130 
info.pl
Details File 1 
main99.py
Details File 1 
d:\server\backend server\assets\client\main99.py
Details File 31 
sys.exe
Details File 13 
platform.sys
Details sha256 4 
9abf6b93eafb797a3556bea1fe8a3b7311d2864d5a9a3687fce84bc1ec4a428c
Details sha256 4 
0f5f0a3ac843df675168f82021c24180ea22f764f87f82f9f77fe8f0ba0b7132
Details IPv4 6 
95.164.17.24
Details IPv4 198 
1.1.1.1
Details IPv4 1 
10.10.51.212
Details Url 1 
https://mirotalk.net/app/mirotalk.dmg
Details Url 1 
https://meet.no42.org
Details Url 2 
http://95.164.17.24:1224