Ousaban: LATAM Banking Malware Abusing Cloud Services
Tags
country: Brazil
maec-delivery-vectors: Watering Hole
attack-pattern: Data Cloud Services - T1021.007 Dll Search Order Hijacking - T1574.001 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Python - T1059.006 Server - T1583.004 Server - T1584.004 Dll Search Order Hijacking - T1038
Show in Graph
Common Information
Type Value
UUID 71918d1b-5217-48a9-b094-0f21ec3c9716
Fingerprint 8c2028a18fbf8e94
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 4, 2022, 2:32 p.m.
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Oct. 15, 2024, 10:08 p.m.
Headline Ousaban: LATAM Banking Malware Abusing Cloud Services
Title Ousaban: LATAM Banking Malware Abusing Cloud Services
Detected Hints/Tags/Attributes 40/3/6
Source URLs
Redirection Url
Details Source https://www.netskope.com/blog/ousaban-latam-banking-malware-abusing-cloud-services
URL Provider
Details Provider Source level domain
Details netskope.com www.netskope.com
Attributes
Details Type #Events CTI Value
Details Domain 27 
gen.malware.detect.by
Details File 1 
avisoprotesto.exe
Details File 3 
crashreport.dll
Details File 1 
securityo6z3.exe
Details File 1 
zapfdingbats.pdf
Details File 7 
win32.inf