UNKNOWN
Tags
| attack-pattern: | Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Rootkit - T1014 Rootkit |
Common Information
| Type | Value |
|---|---|
| UUID | 7351239f-681d-453b-9983-fa25f93598c2 |
| Fingerprint | 9310ff5dfff9cecf |
| Analysis status | IN_PROGRESS |
| Considered CTI value | 0 |
| Text language | |
| Published | None |
| Added to db | Dec. 19, 2024, 4:08 p.m. |
| Last updated | Dec. 23, 2024, 7:22 a.m. |
| Headline | UNKNOWN |
| Title | UNKNOWN |
| Detected Hints/Tags/Attributes | 30/1/47 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://www.secrss.com/articles/11077 |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 10 | cve-2015-7755 |
|
| Details | Domain | 26 | www.antiy.cn |
|
| Details | Domain | 463 | securelist.com |
|
| Details | Domain | 18 | www.antiy.com |
|
| Details | Domain | 2 | www.eastnets.com |
|
| Details | Domain | 2 | www.treasuryandrisk.com |
|
| Details | Domain | 44 | www.schneier.com |
|
| Details | Domain | 185 | www.sans.org |
|
| Details | Domain | 6752 | 163.com |
|
| Details | File | 2 | 最后在saa服务器上执行sql脚本initial_oracle_exploit.sql |
|
| Details | File | 2 | 和swift_msg_queries_all.sql |
|
| Details | File | 2 | lup.mp4 |
|
| Details | File | 6 | equation_antiy_report.html |
|
| Details | File | 4 | equation_part_of_the_component_analysis_of_cryptographic_techniques.html |
|
| Details | File | 6 | equations.html |
|
| Details | File | 5 | equation_drug.html |
|
| Details | File | 2 | report_on_the_worm_stuxnet_attack.html |
|
| Details | File | 2 | analysis_on_the_flame.html |
|
| Details | File | 2 | r120521_001.htm |
|
| Details | File | 5 | antiy_wannacry_nsa.html |
|
| Details | File | 2 | feedtrough_nsa.html |
|
| Details | md5 | 2 | 97ab78fc4ea250fad8f4a96ff6547633 |
|
| Details | md5 | 2 | d48c5e182103d574e6b3127b8d1889f9 |
|
| Details | md5 | 2 | 29ddac3b1dd9873c5d793746f1055ed0 |
|
| Details | IPv4 | 2 | 192.168.206.110 |
|
| Details | IPv4 | 2 | 192.168.208.10 |
|
| Details | IPv4 | 2 | 10.255.10.10 |
|
| Details | IPv4 | 2 | 192.168.206.111 |
|
| Details | IPv4 | 2 | 192.168.208.11 |
|
| Details | IPv4 | 2 | 10.255.10.11 |
|
| Details | Url | 2 | https://www.antiy.cn/video/20190531/lup.mp4 |
|
| Details | Url | 3 | http://securelist.com/blog/research/68750/equation-the-death-star-of-malware-galaxy |
|
| Details | Url | 6 | https://www.antiy.com/response/equation_antiy_report.html |
|
| Details | Url | 4 | https://www.antiy.com/response/equation_part_of_the_component_analysis_of_cryptographic_techniques.html |
|
| Details | Url | 6 | https://www.antiy.com/response/equations/equations.html |
|
| Details | Url | 5 | https://www.antiy.com/response/equation_drug/equation_drug.html |
|
| Details | Url | 2 | https://www.antiy.com/response/stuxnet/report_on_the_worm_stuxnet_attack.html |
|
| Details | Url | 2 | https://www.antiy.com/response/flame/analysis_on_the_flame.html |
|
| Details | Url | 2 | http://www.antiy.com/cn/security/2012/r120521_001.htm |
|
| Details | Url | 2 | https://www.eastnets.com/about |
|
| Details | Url | 2 | https://www.treasuryandrisk.com/2010/10/01/how-to-pick-a-swift-service-bureau |
|
| Details | Url | 5 | https://www.antiy.com/response/antiy_wannacry_nsa.html |
|
| Details | Url | 2 | https://www.schneier.com/blog/archives/2014/01/feedtrough_nsa.html |
|
| Details | Url | 2 | https://mp.weixin.qq.com/s?__biz=mzi0nju2ndmwnq==&mid=2247485034&idx=1&sn=97ab78fc4ea250fad8f4a96ff6547633&scene=21#wechat_redirect |
|
| Details | Url | 2 | https://mp.weixin.qq.com/s?__biz=mzi0nju2ndmwnq==&mid=2247486352&idx=1&sn=d48c5e182103d574e6b3127b8d1889f9&scene=21#wechat_redirect |
|
| Details | Url | 2 | https://mp.weixin.qq.com/s?__biz=mzi0nju2ndmwnq==&mid=2247486420&idx=1&sn=29ddac3b1dd9873c5d793746f1055ed0&scene=21#wechat_redirect |
|
| Details | Url | 5 | https://www.sans.org/reading-room/whitepapers/analyst/sliding-scale-cyber-security-36240 |