TeamTNT Actively Enumerating Cloud Environments to Infiltrate Organizations
Tags
Common Information
| Type | Value |
|---|---|
| UUID | 6a8860cb-ff5b-4c01-8448-9a5364c4f79f |
| Fingerprint | fd09d9c3c8bea7c9 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | June 4, 2021, 1 p.m. |
| Added to db | Sept. 11, 2022, 12:36 p.m. |
| Last updated | Nov. 17, 2024, 6:54 p.m. |
| Headline | TeamTNT Actively Enumerating Cloud Environments to Infiltrate Organizations |
| Title | TeamTNT Actively Enumerating Cloud Environments to Infiltrate Organizations |
| Detected Hints/Tags/Attributes | 78/2/115 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://unit42.paloaltonetworks.com/teamtnt-operations-cloud-environments/ |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 8 | data.sh |
|
| Details | Domain | 6 | search.sh |
|
| Details | Domain | 31 | pool.supportxmr.com |
|
| Details | Domain | 30 | init.sh |
|
| Details | Domain | 2 | scan.pl |
|
| Details | Domain | 5 | punk.py |
|
| Details | Domain | 17 | clean.sh |
|
| Details | Domain | 8 | kube.lateral.sh |
|
| Details | Domain | 43 | setup.sh |
|
| Details | Domain | 3 | xmr.sh.sh |
|
| Details | Domain | 2 | systemd.so |
|
| Details | Domain | 1 | tmate.so |
|
| Details | Domain | 8 | xmrig.so |
|
| Details | File | 4 | spread.txt |
|
| Details | File | 19 | 4.tar |
|
| Details | File | 816 | index.html |
|
| Details | File | 1 | rpm.tar |
|
| Details | File | 1 | xmr.xz |
|
| Details | File | 1 | 1-linux-static-x64.tar |
|
| Details | File | 1 | mass.tar |
|
| Details | File | 5 | p.tar |
|
| Details | File | 4 | orig.tar |
|
| Details | File | 3 | scan.pl |
|
| Details | File | 4 | base64.txt |
|
| Details | File | 5 | punk.py |
|
| Details | File | 1 | aws_in.php |
|
| Details | File | 1 | grabbed_data.php |
|
| Details | File | 1 | tmate_in.php |
|
| Details | File | 1 | results_kubernetes.txt |
|
| Details | File | 1 | working.txt |
|
| Details | sha256 | 5 | a1e9cd08073e4af3256b31e4b42f3aa69be40862b3988f964e96228f91236593 |
|
| Details | sha256 | 2 | de3747a880c4b69ecaa92810f4aac20fe5f6d414d9ced29f1f7ebb82cd0f3945 |
|
| Details | sha256 | 7 | ed40bce040778e2227c869dac59f54c320944e19f77543954f40019e2f2b0c35 |
|
| Details | sha256 | 2 | 584c6efed8bbce5f2c52a52099aafb723268df799f4d464bf5582a9ee83165c1 |
|
| Details | sha256 | 2 | 0d7912e62bc663c9ba6bff21ae809e458b227e3ceec0abac105d20d5dc533a22 |
|
| Details | sha256 | 1 | 5ddd226d400cc0b49d0175ba06a7e55cb2f5e9586111464bcf7b3bd709417904 |
|
| Details | sha256 | 1 | a698562d56715c138750163c84727a1f2edb9d92f231994abf7ae82ef62006bf |
|
| Details | sha256 | 2 | bcd43d4046c64d15da4e87984306dd14dc80daa904a6477ad2b921c49c2f414d |
|
| Details | sha256 | 3 | 3aae4a2bf41aedaa3b12a2a97398fa89a9818b4bec433c20b4e724505277af83 |
|
| Details | sha256 | 1 | 37ba40494303ff2c671d6806977f655bdc6ae45ad09357214b164fd5328efb31 |
|
| Details | sha256 | 2 | 134e9ab62a8efe80a27e2869bd6e98d0afe635e0e0750eb117ff833dc9447c28 |
|
| Details | sha256 | 2 | 45aabbda369956ff04ba4e6bf345cbaa072d49dd4b90c35c7be8c0c96a115733 |
|
| Details | sha256 | 1 | e673ef9910a9d6319be598be72430f1b04c299b48e5cd95ce7ccafac273072f3 |
|
| Details | sha256 | 1 | af986793a515d500ab2d35f8d2aecd656e764504b789b66d7e1a0b727a124c44 |
|
| Details | sha256 | 2 | 456041c34e7a992e76320121b7a6b5a47f12b1ed069e1de735543f5b2a1f1a68 |
|
| Details | sha256 | 2 | d5063df016a6af531ed4e6dd222ff4dbbb5b3b0c9075ad642e94adde8e481cbe |
|
| Details | sha256 | 6 | 9504b74906cf2c4aba515de463f20c02107a00575658e4637ac838278440d1ae |
|
| Details | sha256 | 1 | 229d6e173f22a647c8db9c8e7d0b21c8f86dd4e270abb96548aa40d84457c99a |
|
| Details | sha256 | 1 | 15f8cf9c0ed9891f20be37130c1d0e30946e4e14e00a1b2824da22c6c94b8fe3 |
|
| Details | sha256 | 2 | efdf041abcb93f97a3b46624d18d1c8153711f939298c46a4a48388e7ec1bd1e |
|
| Details | sha256 | 1 | ee7799a42c2f487df7405d0aac06496c9a5bb58daecfb135f6f58e3b3aeedf69 |
|
| Details | sha256 | 2 | 900b17ae0081052fb63a7d74232048cfbc2716cdedbe0ab14cf64b7d387d4329 |
|
| Details | sha256 | 4 | 84078b10ad532834eb771231a068862182efb93ce1e4a8614dfca5ae3229ed94 |
|
| Details | sha256 | 1 | 825c60dd1bb32cd6b7e6686f425c461532093b1e9f6ca662c1ea9b07ec7e470b |
|
| Details | sha256 | 1 | 99211429717c686167c1bcda6c5e55dc0e45f46bfdfe34f3bb272ce1378a47a3 |
|
| Details | sha256 | 2 | 8373c0e8abdd962f46d3808fb10589e4961e38cd96d68a4464d1811788a4f2b7 |
|
| Details | sha256 | 1 | 73a4e43a50c533dffdce6575a630be808780d1b408a6dda335106de0c48926ac |
|
| Details | sha256 | 1 | 24c75a2f86d3c0f13f77b453d476787607a87c1033dca501351846524a4e8ff6 |
|
| Details | sha256 | 1 | e842c810b6ecb9c7634f1cfbf81b6245094528ac5584179eb8e6932eaa34f421 |
|
| Details | sha256 | 1 | 1e565e0672c4cd60b7db32c0ecc1abace6dfd8b6c2e0623c949d31536940fd62 |
|
| Details | sha256 | 1 | 12466d33f1d0e9114b4c20e14d51ca3e7e374b866c57adb6ba5dfef3ee34ee5b |
|
| Details | sha256 | 1 | 2287e71c5707ebb2885cd6afd0bff401e4465ca59c8c2498439859e6c8ec5175 |
|
| Details | sha256 | 2 | b6ddd29b0f74c8cfbe429320e7f83427f8db67e829164b67b73ebbdcd75d162d |
|
| Details | sha256 | 1 | 2f4ffa0e687b4e18e45770812a14ad4fc1ae3f735b4f8280f0dd241e045838fe |
|
| Details | sha256 | 1 | bf9b11b764f63c32fd333cc3916c97490fb06f4dbcff8ae87dfee098eca1e854 |
|
| Details | sha256 | 1 | 5f1c9e8dc98ff3e7cf32096225cbae96dacead6af82986d69bbc0032d0e8da84 |
|
| Details | sha256 | 2 | 3d2481edc5fe122bae2fe316d803e131837606e38a7a3158f7cddc7b436dc6c2 |
|
| Details | sha256 | 1 | f26f805c3a1c01ab4717cc3b4c91581249482b00bd29712ab0c36ba7ce74147c |
|
| Details | sha256 | 2 | 0cdad862a1a695fe9cbf35592f92111e31ac848881fcd1deaa3c6ecd7c241ad7 |
|
| Details | sha256 | 7 | d2fff992e40ce18ff81b9a92fa1cb93a56fb5a82c1cc428204552d8dfa1bc04f |
|
| Details | sha256 | 2 | 3cb401fdba1a0e74389ac9998005805f1d3e8ed70018d282f5885410d48725e1 |
|
| Details | sha256 | 1 | 4e4e01830dc64466683735d32778d17cfbffc7be75d647322240ecf9e2f9d700 |
|
| Details | sha256 | 1 | 11b45924f96844764c7ae56ce0b6ac3c43d3a732bc7101d7ce85ea52d0455afd |
|
| Details | sha256 | 1 | acea877b5e4eb9a4f89c0607872bd718e818775dd70044ba6bcede26b481d079 |
|
| Details | sha256 | 1 | d4084c84b21a24ec7a75b1700c65835edea55ac146e86f874941f9ea4bc30ecd |
|
| Details | sha256 | 1 | 43545f6cd370e6f200347bd9bbafdc3d94240775d816cd5e24dc8072d0f1c9b5 |
|
| Details | sha256 | 1 | 55a53f325a46f0da8a15ce001595b9d27eeb03262a62c40f169a3c855c5e8319 |
|
| Details | sha256 | 1 | c2491f9b1f6eb9b1b31e84b0dd5505c5959947c47230af97dce18a49aab90e6b |
|
| Details | sha256 | 1 | 5265a344fd3d3c91d1e9169678e9dadf6296331ccf91132b99c728761bffb011 |
|
| Details | sha256 | 2 | 0a8499cebddd96af4634e85be50e4f64c9d2c7c616677de171df99691239526b |
|
| Details | sha256 | 2 | 881530fb9634cbf5cf12080f5d13e69cb9497c7ea223a4ac29e0d3c81de3053a |
|
| Details | sha256 | 1 | 5f845e765947c4568e1c201fdfeb016c19c940ca2f1636d1393a65a9ee367e8c |
|
| Details | sha256 | 1 | 44cbddf5092818092439734cd478a0fd80f93949e4fec32553b78064029266af |
|
| Details | sha256 | 2 | d708b28231ef70edc707d3cfc1f9ed72aa06a6db15b7903a22b2cdba435e41f7 |
|
| Details | sha256 | 2 | 1946ddf0ade98a69650cdf5c6951d26abbb2ddb5224ea95279e1372a772a0f9c |
|
| Details | sha256 | 2 | b1f38b8648351bb7c743eed838658ea38975db40358c2af62d4e36905555a332 |
|
| Details | sha256 | 5 | 4e059d74e599757226f93ea8ddcfb794d4bcda605f0e553fbbef47b8b7c82d2b |
|
| Details | sha256 | 1 | 484d09b34cb7fb075647402b52f174b2645c6b2c7e8b271e648421893aacdfb4 |
|
| Details | sha256 | 2 | 49b185d1a03124fd5f664fe908fe833d932124344216535b822a044e9d115234 |
|
| Details | sha256 | 1 | 4a6a31b867ce9033691a6638997b0e46d89462d677e9a1f7d757e9f2efbd4c79 |
|
| Details | sha256 | 2 | e9a58f006e5335d806da5fc772fb2b5dedcd977d6484f462169f7a64a636fb44 |
|
| Details | sha256 | 2 | 61e94f41187a3ce31fd8ac0ae3798aaa0e8984e8ff76debe623e41fecf8d7a12 |
|
| Details | sha256 | 2 | 7270416ff49d679f123f560f135b25afe1754a370b0a4bf99368f1ebbc86cbb1 |
|
| Details | sha256 | 2 | ec92f9a98e2c5449693792aa7fd77d0c7a5a98af13b0595ad3c46da739c44c80 |
|
| Details | sha256 | 1 | 642551b7f4e088797cd37b19280261668c8b381dcf667ea7d0dafed1ec94e460 |
|
| Details | sha256 | 1 | 57689b87b6830411046d7bda19936707a0797bec9dffe03874d1a364c4f29c35 |
|
| Details | sha256 | 1 | f9b5bd4372daf78346e4bb34677633a7795876a3c89c5965eb76f137a0fba448 |
|
| Details | sha256 | 2 | f194d5901d64811c72a2cf3a035b7c36ea36d444ea6291f64138d1e88929349d |
|
| Details | sha256 | 2 | 30e35e225f23495f92c417337d205056c4fd2f8dd9e958365e84b522c3adc851 |
|
| Details | sha256 | 1 | 2e34f88bacc50e0ec06681d6857163b99046fec775a75297f774edd1f6b452c1 |
|
| Details | sha256 | 2 | 5ac76e1edfda445548c35364ba0c3dbb0bcb8a0236c303d2a4e2a94a7073a716 |
|
| Details | sha256 | 1 | 3ae9e772a025d192a689358e263445a8d953e090b1bbe62f83567034938e75b5 |
|
| Details | sha256 | 1 | 9c7f2644e02cb48ab5ff17d541c07f11fd85e5e13cdc210faf34994771a4ca29 |
|
| Details | sha256 | 2 | fece70a9f33c2ed77a5833dba5b7188d5ec00a30fb00e43983e6939cac87fb99 |
|
| Details | sha256 | 2 | 5bb45f372fb4df6a9c6a5460fa1845f5e96af53aa41939eb251cbe989a5cac6c |
|
| Details | sha256 | 2 | e8cd937239d6bf43cb34c7947321a197b0d1067f05c3b21508bffa35a953a3c3 |
|
| Details | sha256 | 4 | 0af1b8cd042b6e2972c8ef43d98c0a0642047ec89493d315909629bcf185dffd |
|
| Details | sha256 | 3 | 3b14c84525f2e56fe3ae7dec09163a4a9c03f11e6a8d65b021c792ad13ed2701 |
|
| Details | sha256 | 1 | dc8e4e45a46a65e70e3d67315ca76127b20ef4dcda2fd012a826b73ee26ab941 |
|
| Details | sha256 | 1 | 6175648ebbe658e3d5984d5c45d5221bf8f8875599d9ce2d62d279b7bba5eeea |
|
| Details | sha256 | 1 | e6e1656ac258318e8226db00dbacdf6914f2dac2d174b1470903b096b7fbecff |
|
| Details | sha256 | 1 | 9cd9549e8b80ee3230bdb1130676ac2396de5e99428b45f14d93b705b157465a |
|
| Details | sha256 | 1 | 79c7a022d2c807dea005fb5c0433eb984eea053d07123754acd864bede03be00 |
|
| Details | IPv4 | 4 | 45.9.148.35 |
|
| Details | Url | 1 | http://45.9.148.35/chimaera/sh |