Mapping the Connections Inside Russia's APT Ecosystem
Tags
country: Ethiopia Russia United States Of America
attack-pattern: Data Direct Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Credential Dumping - T1003
Show in Graph
Common Information
Type Value
UUID 6318e4c2-dea7-4e8f-8769-b182e09becf7
Fingerprint 3f3c2b97c7318785
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 24, 2019, 8:20 a.m.
Added to db June 1, 2023, 10:46 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Mapping the Connections Inside Russia's APT Ecosystem
Title Mapping the Connections Inside Russia's APT Ecosystem
Detected Hints/Tags/Attributes 87/2/5
Source URLs
Redirection Url
Details Source https://intezer.com/blog/malware-analysis/russian-apt-ecosystem/
Details Redirection https://www.intezer.com/blog/malware-analysis/russian-apt-ecosystem/
URL Provider
Details Provider Source level domain
Details intezer.com www.intezer.com
Details intezer.com intezer.com
Attributes
Details Type #Events CTI Value
Details sha256 2 
0ce3bfa972ced61884ae7c1d77c7d4c45e17c7d767e669610cf2ef72b636b464
Details sha256 2 
3cf46c68dccb989fbda3f853cc19025d39d38d9ea5786f4ae6a926677d6c5f62
Details sha256 3 
11b7b8a7965b52ebb213b023b6772dd2c76c66893fc96a18a9a33c8cf125af80
Details sha256 3 
fc54d8afd2ce5cb6cc53c46783bf91d0dd19de604308d536827320826bc36ed9
Details Threat Actor Identifier - APT 665 
APT29