Rewterz Threat Alert – APT SideWinder Group – Active IOCs – Russian-Ukrainian Cyber Warfare - Rewterz
Tags
| country: | Afghanistan China Nepal Pakistan Russia Ukraine |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Vulnerabilities - T1588.006 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | 63b9251b-faf6-447b-a46d-2a91dac93a40 |
| Fingerprint | 82a9a5dbae97ef44 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | March 17, 2022, 5:41 p.m. |
| Added to db | Dec. 19, 2024, 5:57 p.m. |
| Last updated | Dec. 20, 2024, 1:03 a.m. |
| Headline | Rewterz Threat Alert – APT SideWinder Group – Active IOCs – Russian-Ukrainian Cyber Warfare |
| Title | Rewterz Threat Alert – APT SideWinder Group – Active IOCs – Russian-Ukrainian Cyber Warfare - Rewterz |
| Detected Hints/Tags/Attributes | 33/3/9 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 7 | maritimepakistan.kpt-pk.net |
|
| Details | File | 1 | conflict.docx |
|
| Details | md5 | 2 | bbc955b1289b4f90fdfb8906606597e9 |
|
| Details | sha1 | 2 | 6811b418c052baec7e74260e36e6e3cd34b202b0 |
|
| Details | sha256 | 5 | f765b0b6e4a34eb95c6f0ddf058bc88d5ef9ec2b11a5f3504d1673f4f69aceca |
|
| Details | IPv4 | 9 | 209.197.3.8 |
|
| Details | Threat Actor Identifier - APT-C | 37 | APT-C-17 |
|
| Details | Threat Actor Identifier by Tencent | 48 | T-APT-04 |
|
| Details | Url | 3 | https://maritimepakistan.kpt-pk.net/5434/1/3694/2/0/0/0/m/files-ce32ed85/file.rtf |